Examkin

Question

Difficulty: HardDesigning Network Architecture and Hybrid Connectivity

A global pharmaceutical enterprise is modernizing its network architecture to support high-throughput genomic data transfers, remote lab connectivity, and multi-tenant environment isolation. Match each architectural constraint or requirement to the most appropriate Google Cloud hybrid networking service or deployment pattern.

  • Requires a direct, private physical connection providing 100 Gbps bandwidth, low latency, and a 99.99% availability SLA without routing traffic over the public internet.Dedicated Interconnect configured with redundant connections across two edge availability domains (EADs) per region and Cloud Router dynamic routing.
  • Requires SLA-backed 99.99% availability for encrypted hybrid connectivity over public internet lines to remote clinical trial sites, utilizing dynamic BGP routing.HA VPN deployed with two active IPsec tunnels per gateway pair, dual Cloud Routers, and BGP dynamic route advertisement.
  • Requires connecting on-premises data centers to GCP where physical presence at a Google colocation facility is unavailable, utilizing a supported service provider.Partner Interconnect provisioned with service provider redundancy to deliver SLA-backed Layer 2 or Layer 3 connectivity to VPC networks.
  • Requires interconnecting hundreds of isolated spoke VPCs to central hybrid connectivity pipelines without creating a complex, non-transitive mesh of individual VPC network peerings.Network Connectivity Center (NCC) using VPC spokes attached to a central hub for scalable multi-VPC management.

Answer

Direct 100 Gbps private connection with 99.99% SLA matches Dedicated Interconnect with redundant edge availability domains. Encrypted connectivity over public internet with 99.99% SLA matches HA VPN with dual active IPsec tunnels and Cloud Router. Connection via a third-party service provider where direct colocation is absent matches Partner Interconnect. Scalable multi-VPC hub-and-spoke interconnectivity bypassing VPC Peering non-transitivity constraints matches Network Connectivity Center.
Each GCP hybrid networking service fulfills specific technical constraints: Dedicated Interconnect offers high-capacity (10/100 Gbps) direct physical lines; HA VPN supplies encrypted IPsec connections over public lines with 99.99% SLA; Partner Interconnect enables SLA-backed connections through service providers when direct colocation is absent; and Network Connectivity Center simplifies multi-VPC management while accommodating non-transitive VPC network boundaries.

Step-by-Step Solution

1
Analyze high-bandwidth direct physical circuit requirements.
Identify Dedicated Interconnect as the only option supporting 100 Gbps direct circuits with 99.99% SLA using dual Edge Availability Domains (EADs).
Cloud VPN cannot reach 100 Gbps without hundreds of tunnels, and Partner Interconnect relies on third-party provider capacity rather than direct 100 Gbps circuits.
2
Evaluate internet-based encrypted hybrid connection needs.
Match HA VPN to the requirement for 99.99% SLA IPsec encrypted tunnel connectivity over public internet.
Classic VPN does not offer a 99.99% SLA, whereas HA VPN provides high availability through dual active interfaces and Cloud Router BGP integration.
3
Determine connectivity option when lacking physical colocation presence.
Select Partner Interconnect.
Partner Interconnect bridges the customer network and GCP through a certified service provider when direct physical meet-me location presence is unavailable.
4
Resolve multi-VPC routing complexity and VPC Peering transitivity limitations.
Assign Network Connectivity Center (NCC) as the central hub solution for managing spoke VPC networks.
VPC Network Peering is strictly non-transitive, meaning traffic cannot hop across intermediate VPCs without custom VPN or proxy appliances, whereas NCC handles spoke routing centrally.

Key Concept

Selecting and architecting Google Cloud hybrid connectivity options (Dedicated Interconnect, Partner Interconnect, HA VPN, and Network Connectivity Center) based on SLA, bandwidth, encryption, physical colocation capability, and VPC transitivity constraints.
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity