Examkin

Question

Difficulty: MediumDesigning Network Architecture and Hybrid Connectivity

An automotive manufacturing enterprise is designing a hybrid network architecture to connect its central assembly plant data center to Google Cloud. The connection must reliably support a continuous throughput of 15 Gbps for real-time telemetry data. Additionally, on-premises systems must be able to communicate with workloads residing in a secondary workload VPC (VPC B) that is connected to the primary landing zone VPC (VPC A). Which hybrid network architecture meets these bandwidth and routing requirements?

  1. Provision Dedicated Interconnect to satisfy the 15 Gbps throughput requirement, and configure direct hybrid connectivity to both VPCs because VPC Network Peering does not support transitive routing from on-premises networks.Answer
  2. B
    Deploy an HA VPN gateway with multiple IPsec tunnels between the on-premises plant and VPC A to handle the 15 Gbps bandwidth, and establish dedicated hybrid links to both VPC A and VPC B.
  3. C
    Provision Dedicated Interconnect to VPC A, and rely on an existing VPC Network Peering connection between VPC A and VPC B to route on-premises traffic transitively to VPC B.
  4. D
    Deploy an HA VPN gateway between the on-premises plant and VPC A, and enable custom route advertisements on Cloud Router over VPC Network Peering to reach VPC B.

Answer

Provision Dedicated Interconnect to satisfy the 15 Gbps throughput requirement, and configure direct hybrid connectivity to both VPCs because VPC Network Peering does not support transitive routing from on-premises networks.
Dedicated Interconnect provides the required 15 Gbps high-bandwidth capacity. Because VPC Network Peering does not support transitive routing, traffic from an on-premises network connected to VPC A cannot cross a peering link to reach VPC B. Therefore, dedicated hybrid connectivity paths or transit hub solutions (like Network Connectivity Center) must be configured for both VPCs.

Step-by-Step Solution

1
Evaluate throughput requirement
Dedicated Interconnect is required because the dataset transfers exceed the capacity of Cloud VPN (which caps at 3 Gbps per tunnel).
Bandwidth requirements of 15 Gbps necessitate Dedicated Interconnect (offered in 10 Gbps or 100 Gbps circuit sizes).
2
Evaluate routing constraints across VPCs
On-premises networks cannot reach VPC B through VPC A using VPC Network Peering.
VPC Network Peering is strictly non-transitive in Google Cloud.
3
Synthesize optimal network architecture
Combine Dedicated Interconnect with direct routing access to both VPCs (or via Network Connectivity Center / Shared VPC).
Ensures SLA, throughput, and reachability requirements are fully satisfied.

Key Concept

Selecting hybrid connectivity (Dedicated Interconnect vs HA VPN) based on throughput and accounting for VPC Peering non-transitivity.
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity