Examkin

Question

Difficulty: Very hardDesigning Network Architecture and Hybrid Connectivity

An enterprise lead architect is evaluating GCP hybrid networking topologies for four distinct enterprise business units. Match each architectural scenario on the left with the single most appropriate GCP network connectivity solution on the right that meets all throughput, security, SLA, and connectivity requirements.

  • Scenario 1: A financial analytics platform requires a dedicated, unencrypted, high-throughput physical pipe (10 Gbps+) extending on-premises data centers directly to GCP with a 99.99% availability SLA across two colocation domains without traversing the public internet.Dedicated Interconnect provisioned with redundant VLAN attachments across two metropolitan edge availability domains.
  • Scenario 2: A remote branch site requires encrypted IPsec tunnel connectivity to GCP over existing commodity public internet circuits, utilizing Cloud Router with dynamic BGP route propagation and providing a 99.99% availability SLA.High Availability (HA) Cloud VPN configured with dual active-active IPsec tunnels paired with Cloud Router dynamic BGP routing.
  • Scenario 3: An enterprise requires sub-10 Gbps private hybrid connectivity from an on-premises facility where direct colocation with a Google edge Point of Presence (PoP) is physically unavailable, requiring SLA guarantees managed by a third-party carrier.Partner Interconnect provisioned through a supported Service Provider using redundant VLAN attachments.
  • Scenario 4: Two independent GCP VPC networks across separate projects require low-latency, private RFC 1918 internal IP communication without using intermediate VPN gateways or paying for external transit.VPC Network Peering configured directly between the two VPC networks.

Answer

The correct mapping pairs Scenario 1 with Dedicated Interconnect (high-throughput direct physical connection meeting 99.99% SLA); Scenario 2 with HA Cloud VPN (encrypted IPsec over public internet with dynamic BGP routing); Scenario 3 with Partner Interconnect (service provider connection where Google colocation edge is unavailable); and Scenario 4 with VPC Network Peering (direct private inter-VPC connectivity).
The solution accurately pairs each architectural constraint to its definitive GCP networking component: Dedicated Interconnect for direct physical 10 Gbps+ connections; HA Cloud VPN for encrypted internet-based IPsec tunnels; Partner Interconnect for non-colocated locations using carrier services; and VPC Network Peering for internal inter-VPC traffic.

Step-by-Step Solution

1
Analyze Scenario 1 requirements
Identified direct physical link requirement (>10 Gbps, 99.99% SLA, no public internet).
Dedicated Interconnect is the only GCP product providing direct physical circuit extension with 99.99% SLA.
2
Analyze Scenario 2 requirements
Identified encrypted IPsec tunnel over public internet with 99.99% SLA and dynamic BGP.
HA Cloud VPN mandates dual active-active tunnels with Cloud Router BGP to achieve 99.99% availability over internet circuits.
3
Analyze Scenario 3 requirements
Identified third-party service provider requirement due to lack of direct Google colocation presence.
Partner Interconnect is specifically designed for hybrid connections where customers connect through service providers.
4
Analyze Scenario 4 requirements
Identified inter-VPC private IP communication across projects without intermediate gateways.
VPC Network Peering enables direct, non-transitive, high-speed private RFC 1918 interconnectivity between VPCs.

Key Concept

Designing Enterprise GCP Network Topologies and Hybrid Connectivity Options
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity