Examkin

Question

Difficulty: Very hardDesigning Infrastructure for Technical Requirements and High Availability

An enterprise logistics provider is architecting a mission-critical fleet tracking solution on Google Cloud. The application requires global high availability with a target SLA of 99.999%99.999\% uptime, zero Recovery Point Objective (RPO=0RPO = 0), and sub-second failover across continental regions for write-heavy relational transactions. Additionally, the network architecture requires high-throughput hybrid connectivity from on-premises data centers exceeding 10 Gbps10\text{ Gbps} per link, along with strict perimeter security to prevent data exfiltration. Which TWO architectural decisions should the cloud architect implement to meet these requirements? (Select TWO)

  1. Provision a Multi-Region Cloud Spanner instance to serve the transactional data tier across multi-region failure domains.Answer
  2. Establish Dedicated Interconnect for hybrid connectivity and enforce VPC Service Controls around the Google Cloud project resources.Answer
  3. C
    Deploy Cloud SQL for PostgreSQL with regional High Availability (HA) enabled and configure cross-region read replicas for active-active zero-RPO transactional writes.
  4. D
    Provision High Availability (HA) Cloud VPN tunnels with dynamic BGP routing to achieve 15 Gbps15\text{ Gbps} single-tunnel throughput for on-premises telemetry ingress.
  5. E
    Configure internal load balancer health checks to execute direct queries against backend database tables every 5 seconds to ensure backend database readiness.

Answer

The team must deploy Cloud Spanner in a multi-region configuration for multi-region zero-RPO transactional data, and establish Dedicated Interconnect paired with VPC Service Controls for high-bandwidth hybrid ingress and exfiltration prevention.
To satisfy a 99.999% availability SLA with zero RPO across multi-region failure domains for relational data, Multi-Region Cloud Spanner is required. Synchronous multi-region Paxos consensus enables continuous operations without data loss. Furthermore, for hybrid network bandwidth requirements exceeding 10 Gbps per link, Dedicated Interconnect provides 10 Gbps or 100 Gbps dedicated circuits, while VPC Service Controls define a security perimeter that prevents unauthorized data exfiltration.

Step-by-Step Solution

1
Evaluate multi-region transactional database requirements (99.999%99.999\% SLA and RPO=0RPO = 0).
Identify that Cloud Spanner's multi-region configuration is the only GCP relational storage product offering multi-region synchronous replication with a 99.999% availability SLA.
Cloud SQL supports synchronous replication only within a single region across zones, whereas cross-region replication in Cloud SQL is asynchronous (RPO > 0).
2
Evaluate hybrid network throughput requirements (>10 Gbps>10\text{ Gbps}).
Select Dedicated Interconnect, which offers native 10 Gbps or 100 Gbps physical circuits.
HA Cloud VPN tunnels are capped at 3 Gbps per tunnel and cannot natively deliver >10 Gbps without complex tunnel aggregation.
3
Evaluate data exfiltration control requirements.
Apply VPC Service Controls around Google Cloud resources.
VPC Service Controls create a security perimeter that prevents unauthorized data transfers to external storage locations even if IAM credentials are compromised.

Key Concept

Multi-Region High Availability & Hybrid Infrastructure Design
Rate this question

Topics

Designing Infrastructure for Technical Requirements and High Availability