Examkin

Question

Difficulty: MediumDesigning Network Architecture and Hybrid Connectivity

A healthcare organization is extending its on-premises data center to Google Cloud to host a real-time medical imaging analysis system. The workload requires a dedicated private connection with 4 Gbps bandwidth, strict SLA guarantees, and no traversal of the public internet. Furthermore, on-premises systems must securely communicate with application workloads distributed across multiple distinct GCP project environments. Which hybrid network architecture should you recommend?

  1. Provision a Partner Interconnect connection in a Shared VPC host project, configure Cloud Routers with BGP, and attach service project subnets directly to the Shared VPC.Answer
  2. B
    Provision a Partner Interconnect connection in a central Hub VPC, configure Cloud Routers, and establish VPC Network Peering between the Hub VPC and all Spoke VPCs in individual projects.
  3. C
    Deploy an HA VPN gateway with multiple active-active IPSec tunnels aggregated across each project VPC to achieve 4 Gbps bandwidth.
  4. D
    Establish VPC Network Peering between the on-premises network routers and a Google Cloud VPC Router, enabling dynamic route exchange across all project VPCs.

Answer

Provision a Partner Interconnect connection in a Shared VPC host project, configure Cloud Routers with BGP, and attach service project subnets directly to the Shared VPC.
Partner Interconnect offers private, SLA-guaranteed hybrid connectivity scalable to 4 Gbps via a service provider. Combining Partner Interconnect with a Shared VPC host project enables all workloads in attached service projects to access on-premises resources directly within the shared network space, circumventing the non-transitive limitation of VPC Network Peering.

Step-by-Step Solution

1
Evaluate hybrid connectivity requirements based on SLA, privacy, and throughput (4 Gbps).
HA VPN is unsuitable because it travels over the public internet and requires multiple tunnels. Partner Interconnect or Dedicated Interconnect provides private, SLA-backed connectivity. For a 4 Gbps requirement, Partner Interconnect with 4 Gbps or 5 Gbps VLAN attachments is the optimal choice.
Dedicated Interconnect is provisioned in 10 Gbps or 100 Gbps physical circuits, whereas Partner Interconnect offers flexible sub-10 Gbps capacities (such as 1, 2, 4, or 5 Gbps) via service providers.
2
Evaluate multi-project cloud topology requirements for hybrid accessibility.
VPC Network Peering does not support transitive routing (traffic from an on-premises Interconnect cannot transit a Hub VPC into a peered Spoke VPC). Using a Shared VPC host project allows subnets from service projects to reside in the same global VPC network.
Shared VPC eliminates the need for transitive routing across project boundaries by centralizing network administration and hybrid interconnects in the host project.

Key Concept

Hybrid Connectivity Selection & Shared VPC Routing Boundaries
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity