Examkin

Question

Difficulty: MediumDesigning Network Architecture and Hybrid Connectivity

A multinational enterprise is designing a hybrid network architecture to connect its on-premises data centers with Google Cloud VPCs. Match each GCP hybrid networking component on the left with the architectural requirement or design constraint it satisfies on the right.

  • Dedicated InterconnectDirect physical circuit at a Google colocation facility delivering high-bandwidth (10 Gbps or 100 Gbps per link) unencrypted private connectivity with an enterprise SLA.
  • HA VPNEncrypted IPsec connections established over the public internet providing 99.99% service availability via dual active-active tunnels.
  • Partner InterconnectPrivate layer 2 or layer 3 connectivity established through a supported third-party service provider for sites requiring sub-10 Gbps bandwidth.
  • Cloud RouterControl plane component that dynamically exchanges BGP routes to manage topology routing between Google Cloud VPCs and on-premises routers.

Answer

Dedicated Interconnect pairs with direct 10/100 Gbps physical colocation connectivity; HA VPN pairs with 99.99% SLA IPsec connections over the public internet; Partner Interconnect pairs with sub-10 Gbps connectivity via service providers; Cloud Router pairs with dynamic BGP route control plane management.
Each GCP hybrid networking component directly matches its functional constraint: Dedicated Interconnect delivers unencrypted 10/100 Gbps direct physical colocation links; HA VPN provides 99.99% available IPsec tunnels over public transit; Partner Interconnect offers sub-10 Gbps service-provider-managed connections; Cloud Router provides dynamic BGP control plane routing.

Step-by-Step Solution

1
Identify direct high-bandwidth physical connection options
Dedicated Interconnect connects directly at a Google colocation facility using 10 Gbps or 100 Gbps physical circuits.
Direct private physical connections at colocation facilities meet strict high-throughput SLA demands.
2
Identify high-availability internet-based encrypted options
HA VPN delivers 99.99% SLA using dual active-active IPsec gateway tunnels over public internet routes.
HA VPN provides encrypted traffic transport with high availability topology requirements.
3
Identify sub-10 Gbps service provider connectivity options
Partner Interconnect bridges on-premises locations to GCP via third-party service provider networks for fractional bandwidth capacities.
Partner Interconnect supports data transport without requiring direct physical colocation infrastructure.
4
Determine the control plane mechanism for dynamic routing
Cloud Router establishes BGP sessions to exchange topology routes dynamically between VPCs and on-premises gateways.
Dynamic BGP route advertisement eliminates static route maintenance across hybrid links.

Key Concept

Designing Hybrid Network Architecture and Connectivity Controls
Estimated Time:1m 30s
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity