Examkin

Question

Difficulty: EasyConfiguring Network Topology and VPC Infrastructure

An administrator is setting up a dedicated management VPC network (VPC-Mgmt) that requires direct, private IP connectivity to two separate application VPC networks (VPC-App1 and VPC-App2) in Google Cloud. The two application VPC networks do not need to communicate with each other. Which TWO configuration actions must be performed to establish this connectivity using VPC Network Peering?

  1. Establish a VPC Network Peering connection from VPC-Mgmt to VPC-App1 and a matching peering connection from VPC-App1 to VPC-Mgmt.Answer
  2. Establish a VPC Network Peering connection from VPC-Mgmt to VPC-App2 and a matching peering connection from VPC-App2 to VPC-Mgmt.Answer
  3. C
    Create a single peering connection between VPC-App1 and VPC-App2 and rely on VPC-App1 to transitively route traffic to VPC-Mgmt.
  4. D
    Provision a Dedicated Interconnect circuit between VPC-App1 and VPC-App2 to bridge communication back to VPC-Mgmt.
  5. E
    Configure VPC Service Control perimeters around VPC-Mgmt and VPC-App1 to enable internal network routing without creating peering connections.

Answer

To establish connectivity between VPC-Mgmt and both application VPCs, you must create a bidirectional peering pair between VPC-Mgmt and VPC-App1, and separately create a bidirectional peering pair between VPC-Mgmt and VPC-App2.
VPC Network Peering requires explicit peering configuration from both participating VPC networks. To connect VPC-Mgmt to VPC-App1 and VPC-App2, direct bidirectional peering connections must be created between VPC-Mgmt and VPC-App1, as well as between VPC-Mgmt and VPC-App2.

Step-by-Step Solution

1
Identify the direct connectivity requirements for each independent VPC pair.
Determine that VPC-Mgmt needs to talk directly to VPC-App1, and VPC-Mgmt needs to talk directly to VPC-App2.
VPC Network Peering is non-transitive, so intermediate networks cannot forward traffic to third-party VPCs.
2
Configure bilateral VPC Network Peering for VPC-Mgmt and VPC-App1.
Peering state transitions to ACTIVE for the VPC-Mgmt and VPC-App1 pair.
Both network administrators (or both sides of the configuration) must authorize the peering relationship.
3
Configure bilateral VPC Network Peering for VPC-Mgmt and VPC-App2.
Peering state transitions to ACTIVE for the VPC-Mgmt and VPC-App2 pair.
A separate peering pair is required for each distinct pair of VPC networks.

Key Concept

VPC Network Peering Bidirectionality and Non-Transitivity
Rate this question

Topics

Configuring Network Topology and VPC Infrastructure

More questions from this topic