Examkin

Question

Difficulty: HardConfiguring Hybrid Connectivity and VPN Interconnects

A global retail corporation is configuring hybrid connectivity between an on-premises data center and a Google Cloud VPC network. The primary database workload requires a dedicated 10 Gbps connection with sub-10ms latency. Additionally, enterprise compliance rules mandate that all data transferred between the on-premises network and Google Cloud must be encrypted at the network layer using IPsec. Which hybrid connectivity architecture satisfies both requirements according to Google Cloud best practices?

  1. Configure HA Cloud VPN over a Dedicated Interconnect connection using private IP addresses for the VPN gateway interfaces.Answer
  2. B
    Establish a Partner Interconnect connection with Cloud Router dynamic BGP and rely on VPC Service Controls to encrypt traffic in transit.
  3. C
    Deploy two HA Cloud VPN gateways over the public internet with equal-cost multi-path routing across eight active IPsec tunnels.
  4. D
    Configure VPC Network Peering directly between the on-premises core router and the Google Cloud VPC network with IPsec encryption enabled.

Answer

Configure HA Cloud VPN over a Dedicated Interconnect connection using private IP addresses for the VPN gateway interfaces.
Private IP HA Cloud VPN over Dedicated Interconnect is the recommended Google Cloud pattern when both dedicated high-throughput/low-latency physical transport and mandatory IPsec encryption are required. The HA VPN gateway utilizes private IP addresses over the Interconnect VLAN attachment, encrypting traffic before sending it across the physical connection.

Step-by-Step Solution

1
Analyze performance and encryption requirements
The scenario demands a dedicated 10 Gbps connection with guaranteed low latency while simultaneously enforcing mandatory IPsec encryption.
Standard Dedicated Interconnect satisfies the 10 Gbps low-latency requirement but is unencrypted by default. Standard HA VPN provides IPsec encryption but runs over the public internet without bandwidth SLAs.
2
Evaluate Google Cloud hybrid connectivity options for combining IPsec encryption with Cloud Interconnect
Deploying Private IP HA VPN over Cloud Interconnect provisions IPsec VPN gateways directly inside the private IP space of a Dedicated Interconnect VLAN attachment.
This combined architecture achieves both the dedicated 10 Gbps performance SLA of Cloud Interconnect and the required IPsec transport encryption.

Key Concept

Private IP HA VPN over Cloud Interconnect
Rate this question

Topics

Configuring Hybrid Connectivity and VPN Interconnects

More questions from this topic