Examkin

Question

Difficulty: HardDesigning Infrastructure for Technical Requirements and High Availability

An enterprise utility provider is architecting an IoT smart-grid monitoring platform on Google Cloud. The system must process continuous operational metrics from millions of distributed smart meters across two separate geographic regions. The business requires multi-region high availability with a strict Recovery Point Objective (RPO) of zero and near-zero Recovery Time Objective (RTO) for transactional state data. Furthermore, hybrid network connectivity between the Google Cloud Virtual Private Cloud (VPC) and the on-premises control center must guarantee throughput exceeding 10 Gbps while ensuring sensitive operational telemetry cannot be exfiltrated to external, unapproved cloud storage buckets. Which TWO architectural solutions should you implement to satisfy these technical availability and security requirements?

  1. Deploy a multi-region Cloud Spanner database instance to store core transactional telemetry, utilizing synchronous replication across regions to deliver high availability and zero RPO.Answer
  2. B
    Provision Cloud SQL for PostgreSQL with cross-region read replicas to handle multi-region transactional writes with zero RPO.
  3. Establish Dedicated Interconnect with redundant links across two metro locations for high-throughput hybrid connectivity, and enforce VPC Service Controls perimeters to prevent data exfiltration to external storage buckets.Answer
  4. D
    Deploy High-Availability (HA) VPN with multiple active-active IPsec tunnels to achieve encrypted hybrid connectivity exceeding 10 Gbps between on-premises systems and the VPC.
  5. E
    Apply restrictive IAM roles without VPC Service Controls to prevent telemetry exfiltration from internal Compute Engine instances to external storage buckets.

Answer

The application requires deploying a multi-region Cloud Spanner database for zero RPO transactional consistency and establishing Dedicated Interconnect alongside VPC Service Controls for high-throughput, exfiltration-resistant hybrid networking.
To satisfy zero RPO and multi-region high availability for transactional writes, multi-region Cloud Spanner is required due to its synchronous Paxos-based replication across regions. For hybrid network traffic exceeding 10 Gbps with high availability, Dedicated Interconnect provides enterprise-grade high bandwidth across distinct metro facilities, while VPC Service Controls isolate resources to prevent unauthorized exfiltration to external cloud storage destinations.

Step-by-Step Solution

1
Evaluate storage database requirements for RPO=0 across multiple regions.
Cloud Spanner uses Paxos-based synchronous cross-region replication, guaranteeing transactional consistency and zero RPO failover. Cloud SQL relies on asynchronous cross-region replication which risks data loss.
Selecting Cloud Spanner satisfies the strict zero RPO requirement for multi-region transactional telemetry.
2
Evaluate network connectivity requirements for throughput > 10 Gbps.
Dedicated Interconnect offers 10 Gbps or 100 Gbps physical circuits capable of meeting high-throughput SLA demands across metro locations, whereas HA VPN is limited to 3 Gbps per tunnel.
Dedicated Interconnect provides the necessary bandwidth and high-availability SLA for enterprise hybrid traffic.
3
Evaluate data exfiltration control requirements.
VPC Service Controls form a security perimeter around resources, blocking data transfer calls to Cloud Storage buckets outside the boundary even if IAM rights permit access.
IAM alone permits data movement to external storage if an identity possesses appropriate write permissions.

Key Concept

Multi-region High Availability and Enterprise Security Architecture
Rate this question

Topics

Designing Infrastructure for Technical Requirements and High Availability