Examkin

Question

Difficulty: MediumDesigning Network Architecture and Hybrid Connectivity

A global video gaming studio needs to connect its on-premises rendering farm to a Google Cloud Virtual Private Cloud (VPC) to handle burst render workloads. The network connection must support a sustained 4 Gbps bandwidth requirement with encrypted traffic in transit. The studio's physical facility is in a regional data center that does not support direct colocation at a Google Cloud Meet-Me-Point (PoP). Which hybrid connectivity architecture should the Cloud Architect recommend to meet these requirements?

  1. Provision Partner Interconnect through a supported service provider to reach Google Cloud, and configure HA VPN over the Partner Interconnect attachments to encrypt the traffic.Answer
  2. B
    Provision a 10 Gbps Dedicated Interconnect circuit and order direct cross-connects between the on-premises routers and Google's edge location.
  3. C
    Deploy multiple standard HA VPN tunnels over the public internet and rely on Cloud Router BGP ECMP to aggregate throughput beyond 3 Gbps without service provider involvement.
  4. D
    Configure VPC Network Peering between the on-premises router and the Google Cloud VPC network across a third-party internet service provider.

Answer

Provision Partner Interconnect through a supported service provider to reach Google Cloud, and configure HA VPN over the Partner Interconnect attachments to encrypt the traffic.
Partner Interconnect enables enterprise data centers that do not reside in a Google Cloud colocation facility (Meet-Me-Point) to connect to GCP via a supported service provider. By layering HA VPN over Private Interconnect attachments, the architecture satisfies both the 4 Gbps SLA-backed throughput requirement and the requirement for encrypted traffic in transit.

Step-by-Step Solution

1
Analyze connectivity location and colocation constraints.
Since the facility lacks direct presence at a Google Meet-Me-Point (PoP), Dedicated Interconnect cannot be physically cabled. Partner Interconnect is required to bridge the on-premises data center via a supported service provider.
Partner Interconnect extends GCP network reach to locations where Google does not have a direct colocation facility.
2
Evaluate throughput and security (encryption) requirements.
The requirement demands 4 Gbps throughput with encryption in transit. A standard HA VPN over public internet does not offer dedicated SLA guarantees for sustained 4 Gbps burst workloads.
Deploying HA VPN over Partner Interconnect attachments combines private SLA-backed throughput with IPsec encryption.

Key Concept

Selecting Partner Interconnect with HA VPN for encrypted, high-bandwidth hybrid connectivity from non-colocated facilities
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity