Examkin

Question

Difficulty: EasyDisaster Recovery and Business Continuity Execution

An organization is executing a disaster recovery (DR) test to validate hybrid failover from their on-premises data center to a secondary Google Cloud Virtual Private Cloud (VPC-B). The on-premises environment connects directly to VPC-A using Cloud VPN, while VPC-A is connected to VPC-B using VPC Network Peering. During the DR test, on-premises workloads fail to reach resources in VPC-B. Which action should the cloud architect take to establish connectivity for the DR failover scenario?

  1. Deploy a direct hybrid connection such as Cloud VPN between the on-premises network and VPC-B, because VPC Network Peering does not support transitive routing.Answer
  2. B
    Enable custom route exchange on the VPC Peering connection in VPC-A to transit the on-premises Cloud VPN routes directly into VPC-B.
  3. C
    Migrate the target relational database in VPC-B to Cloud Spanner to natively bypass VPC peering constraints during disaster recovery.
  4. D
    Provision a new Dedicated Interconnect during the active DR event to replace Cloud VPN without prior quota management.

Answer

Deploy a direct hybrid connection such as Cloud VPN between the on-premises network and VPC-B, because VPC Network Peering does not support transitive routing.
VPC Network Peering does not support transitive routing. Traffic originating on-premises over Cloud VPN entering VPC-A cannot traverse VPC Peering to reach VPC-B. Establishing direct VPN connectivity to VPC-B provides the necessary network pathway for disaster recovery execution.

Step-by-Step Solution

1
Identify the network topology constraint causing traffic failure during DR execution.
Recognize that VPC-A acts as an attempted transit network between on-premises Cloud VPN and peered VPC-B.
Google Cloud VPC Network Peering strictly enforces non-transitivity, preventing external traffic from traversing peered VPCs.
2
Select the appropriate hybrid network topology modification for disaster recovery connectivity.
Determine that a direct connection (such as Cloud VPN or Network Connectivity Center hub/spoke) must connect the on-premises router directly to VPC-B.
Direct hybrid connectivity ensures routes are advertised directly into the target DR VPC network.

Key Concept

VPC Network Peering Non-Transitivity in Disaster Recovery
Rate this question

Topics

Disaster Recovery and Business Continuity Execution

More questions from this topic