Examkin

Question

Difficulty: MediumConfiguring Hybrid Connectivity and VPN Interconnects

An energy utility enterprise needs to securely connect its on-premises operational center to a Google Cloud Virtual Private Cloud (VPC) to stream telemetry data from regional substations. The network connection must support a peak throughput of 800 Mbps, guarantee a 99.99% service availability SLA, enforce mandatory IPsec encryption in transit for regulatory compliance, and be fully provisioned within two days. Which hybrid connectivity solution should you implement?

  1. Deploy a High Availability (HA) Cloud VPN gateway with dual active-active IPsec tunnels connected to Cloud Router for dynamic BGP routing.Answer
  2. B
    Provision a 10 Gbps Dedicated Interconnect connection pair with Cloud Router to establish a private physical link.
  3. C
    Establish VPC Network Peering directly between the on-premises border router and the Google Cloud VPC network.
  4. D
    Configure VPC Service Controls perimeter rules to ingest telemetry over public HTTPS endpoints without dedicated tunnels.

Answer

Deploying an HA Cloud VPN gateway with active-active IPsec tunnels and Cloud Router dynamic BGP routing satisfies the 99.99% SLA, 800 Mbps bandwidth requirement, IPsec encryption mandate, and rapid deployment timeline.
Deploying HA Cloud VPN with dual active-active IPsec tunnels paired with Cloud Router meets all specified enterprise requirements: HA Cloud VPN guarantees a 99.99% availability SLA, natively provides IPsec encryption in transit, easily handles the 800 Mbps throughput requirement (up to 3 Gbps per tunnel), and can be configured immediately without physical infrastructure lead time.

Step-by-Step Solution

1
Analyze bandwidth and deployment timeline requirements
Peak bandwidth is 800 Mbps, which falls well within the capacity of Cloud VPN (up to 3 Gbps per tunnel) and does not necessitate Dedicated or Partner Interconnect (>10 Gbps / long lead times).
Choosing Interconnect for sub-Gbps workloads incurs unnecessary cost and long physical circuit provisioning times.
2
Evaluate availability and encryption mandates
HA Cloud VPN provides a 99.99% availability SLA when configured with dual active-active tunnels across distinct zones and enforces IPsec encryption natively.
Standard Interconnect attachments do not encrypt traffic in transit natively without secondary VPN layers.
3
Select the optimal hybrid connectivity option
HA Cloud VPN with Cloud Router dynamic routing is the solution that meets SLA, bandwidth, encryption, and rapid deployment requirements.
It fulfills all enterprise constraints without unnecessary physical operational overhead.

Key Concept

Configuring HA Cloud VPN for high-availability, encrypted sub-Gbps hybrid connectivity
Rate this question

Topics

Configuring Hybrid Connectivity and VPN Interconnects

More questions from this topic