Question

Difficulty: MediumPlanning Virtual Private Cloud (VPC) Networks and Subnets

An organization is planning to migrate several core workloads from an on-premises data center to Google Cloud. The on-premises network uses the private IP range 10.0.0.0/1610.0.0.0/16, and the cloud environment will connect to on-premises via a Cloud VPN gateway. The cloud network team needs to design a multi-region Google Cloud network strategy that prevents IP routing conflicts and allows flexible future subnet growth. Which TWO subnet design practices should the network team enforce during the planning stage?

  1. Create a custom mode VPC network rather than relying on an auto mode VPC network.Answer
  2. B
    Use the default auto mode VPC network to automatically provision subnets across all Google Cloud regions.
  3. Allocate custom primary CIDR ranges for each region that do not overlap with the 10.0.0.0/1610.0.0.0/16 on-premises network or with other subnets in the VPC.Answer
  4. D
    Provision overlapping primary CIDR ranges across different regions and rely on internal DNS to resolve routing conflicts across the Cloud VPN tunnel.

Answer

The networking team must create a custom mode VPC network and allocate custom primary CIDR ranges for each region that do not overlap with the on-premises network or other cloud subnets.
Selecting a custom mode VPC allows network engineers to manually assign non-overlapping IP address ranges, avoiding the predefined IP blocks assigned by auto mode. Furthermore, ensuring that primary subnet CIDR blocks in all regions are disjoint from the on-premises network ensures packet routing across Cloud VPN functions correctly without IP collisions.

Step-by-Step Solution

1
Analyze VPC mode requirements for hybrid cloud planning.
Auto mode VPCs automatically generate subnets across a large set of default IP ranges (10.128.0.0/910.128.0.0/9), which often conflicts with enterprise networks. Custom mode VPCs give total control over IP range planning.
Choosing custom mode prevents automated IP assignment that could overlap with on-premises ranges.
2
Verify IP range uniqueness across hybrid network boundaries.
Subnet ranges in GCP must be disjoint from on-premises CIDR blocks (10.0.0.0/1610.0.0.0/16) to enable proper BGP or static routing across Cloud VPN.
Overlapping CIDR ranges break IP routing between Google Cloud and on-premises environments.

Key Concept

VPC Network Planning and Subnet IP Addressing in Hybrid Environments
Estimated Time:1m 30s
Rate this question