Examkin

Question

Difficulty: MediumDesigning Network Architecture and Hybrid Connectivity

A enterprise networking team is designing its hybrid connectivity architecture between an on-premises data center and Google Cloud. Match each Google Cloud hybrid networking component to its primary design requirement or architectural capability.

  • Cloud RouterProvides dynamic BGP routing updates over IPsec VPN or Cloud Interconnect attachments.
  • Dedicated InterconnectEstablishes a direct physical wire connection between an on-premises facility and a Google colocation facility with 10 Gbps or 100 Gbps circuit capacities.
  • Partner InterconnectConnects an on-premises network to a VPC through a supported service provider when direct colocation presence is unavailable.
  • HA VPNDelivers an IPsec encrypted hybrid connection offering a 99.99% availability SLA over the public internet.

Answer

Cloud Router matches dynamic BGP routing updates; Dedicated Interconnect matches direct physical wire connection at a Google facility; Partner Interconnect matches connection through a service provider; HA VPN matches encrypted IPsec connection with 99.99% SLA over the internet.
Each hybrid connectivity technology fulfills a distinct role: Cloud Router handles BGP dynamic routing, Dedicated Interconnect establishes direct physical connections at Google edge facilities, Partner Interconnect leverages service provider networks for indirect connectivity, and HA VPN provides encrypted 99.99% SLA connectivity over the public internet.

Step-by-Step Solution

1
Identify the primary capability of Cloud Router
Cloud Router dynamically exchanges routes using BGP across VPNs or Interconnects.
Cloud Router manages dynamic routing to avoid static route configuration in GCP VPCs.
2
Distinguish between Dedicated Interconnect and Partner Interconnect
Dedicated Interconnect requires a physical fiber link directly to Google edge facilities, whereas Partner Interconnect uses a service provider's network.
Physical proximity to Google colocation dictates whether Dedicated or Partner Interconnect is appropriate.
3
Identify the encryption and availability profile of HA VPN
HA VPN provides encrypted IPsec tunnels over public internet paths with a 99.99% SLA architecture.
HA VPN requires dual active interfaces and BGP routing to deliver high-availability encrypted connectivity.

Key Concept

Designing Hybrid Network Architecture in GCP
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity