Examkin

Question

Difficulty: HardDesigning Network Architecture and Hybrid Connectivity

A multinational biomedical research organization is designing hybrid connectivity to transfer large genomic datasets between its on-premises laboratory center and Google Cloud VPCs. The architecture requires a minimum sustained dedicated bandwidth of 12 Gbps12\text{ Gbps}, consistent low latency, a 99.99%99.99\% availability SLA, and mandatory IPsec encryption for all data in transit across the hybrid connection. Which hybrid network architecture should the lead Cloud Architect recommend?

  1. Provision a 99.99% HA Dedicated Interconnect topology using dual 10 Gbps links across two distinct edge availability domains (metropolitan locations), configured with Cloud Routers and HA VPN over Dedicated Interconnect.Answer
  2. B
    Deploy multiple HA VPN gateway pairs aggregated across public internet links using Cloud Router BGP dynamic routing to achieve 12 Gbps total throughput and a 99.99% SLA.
  3. C
    Establish a Dedicated Interconnect connection into a central Hub VPC and connect all Spoke VPCs using VPC Network Peering, relying on default peering configuration to transitively route on-premises traffic through the Hub VPC to the Spoke VPCs.
  4. D
    Configure Carrier Peering over a public Autonomous System Number (ASN) with Cloud Router to encrypt traffic at Google's edge routers without needing Dedicated Interconnect or HA VPN.

Answer

Deploy a 99.99% HA Dedicated Interconnect topology across two metropolitan locations using 10 Gbps circuits, integrated with HA VPN over Dedicated Interconnect for IPsec encryption.
The correct recommendation is to deploy a 99.99% HA Dedicated Interconnect topology across two metro locations using 10 Gbps circuits, integrated with HA VPN over Dedicated Interconnect. Dedicated Interconnect provides the required bandwidth (>10 Gbps), low latency, and 99.99% SLA when properly configured across dual edge availability domains. Running HA VPN over Dedicated Interconnect satisfies the requirement for IPsec encryption over the private link.

Step-by-Step Solution

1
Analyze bandwidth and SLA constraints
The requirement of 12 Gbps12\text{ Gbps} continuous throughput exceeds standard single Cloud VPN tunnel capacity (3 Gbps3\text{ Gbps} per tunnel) and requires Dedicated Interconnect (10 Gbps or 100 Gbps circuits). To achieve a 99.99%99.99\% SLA, Google Cloud mandates dual interconnect attachments across two distinct metro locations.
Dedicated Interconnect is required for bandwidth >10 Gbps> 10\text{ Gbps} and guaranteed low latency/SLA.
2
Evaluate security and encryption constraints
Standard Dedicated Interconnect traffic travels unencrypted across private physical links. To satisfy the mandatory IPsec encryption requirement, HA VPN must be configured to run over the Dedicated Interconnect attachments.
HA VPN over Dedicated Interconnect combines high-capacity private circuits with IPsec encryption.
3
Validate network routing topology
Deploying dual Dedicated Interconnect circuits with HA VPN and Cloud Router dynamic BGP routing satisfies the 12 Gbps12\text{ Gbps} throughput requirement, 99.99%99.99\% SLA, and encryption compliance.
This configuration meets all business and architectural constraints without relying on unsupported non-transitive VPC peering behaviors.

Key Concept

Designing High-Availability Encrypted Hybrid Connectivity (Dedicated Interconnect + HA VPN)
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity