Examkin

Question

Difficulty: MediumConfiguring Hybrid Connectivity and VPN Interconnects

An enterprise financial network requires connecting an on-premises data center to a Google Cloud Virtual Private Cloud (VPC). The solution must meet a 99.99% availability SLA, provide mandatory end-to-end IPsec data encryption, and support dynamic route propagation. Which TWO architectural configurations must be implemented together to satisfy all requirements?

  1. Deploy HA VPN over Cloud Interconnect using private IP addressing to satisfy both the 99.99% SLA and IPsec encryption constraints.Answer
  2. Configure Cloud Routers with dynamic BGP peering on both ends of the connection to manage automated route exchange and failover.Answer
  3. C
    Configure VPC Network Peering between the on-premises routing hardware and the GCP VPC to achieve transitive encrypted routing without Cloud Routers.
  4. D
    Provision Classic VPN gateways with static routes across two regions to guarantee a 99.99% availability SLA.
  5. E
    Establish a VPC Service Controls perimeter to automatically enforce IPsec encryption across all hybrid traffic flows.

Answer

To achieve a 99.99% SLA with mandatory IPsec encryption and dynamic routing, the architecture must deploy HA VPN over Cloud Interconnect (Private IP HA VPN) alongside Cloud Routers configured for BGP dynamic routing.
Combining HA VPN over Cloud Interconnect (Private IP HA VPN) fulfills both the 99.99% availability SLA requirement of Cloud Interconnect and the mandatory IPsec encryption requirement. Pair this with Cloud Routers running dynamic BGP to ensure continuous route exchange and high-availability automated failover.

Step-by-Step Solution

1
Evaluate SLA and encryption requirements for hybrid connectivity.
Standard Cloud Interconnect provides a 99.99% SLA but does not natively encrypt traffic; standard HA VPN provides IPsec encryption but has a lower SLA. Combining HA VPN over Private IP Cloud Interconnect satisfies both constraints.
Private IP HA VPN allows IPsec tunnels to be established over Cloud Interconnect attachments, inheriting the 99.99% SLA while maintaining mandatory data encryption.
2
Configure dynamic routing components.
Cloud Routers are deployed to manage BGP sessions across the hybrid connection.
Dynamic BGP routing via Cloud Router enables automatic route propagation and failover necessary for SLA-backed high availability.

Key Concept

Configuring HA VPN over Cloud Interconnect with Cloud Router BGP for 99.99% SLA and encrypted transit
Rate this question

Topics

Configuring Hybrid Connectivity and VPN Interconnects

More questions from this topic