Examkin

Question

Difficulty: MediumDesigning Network Architecture and Hybrid Connectivity

A global retail company is establishing hybrid connectivity between its primary on-premises data center and Google Cloud. The workload requires a continuous 20 Gbps low-latency connection backed by an enterprise SLA. Within Google Cloud, the architecture requires central governance for core services while allowing two isolated workload VPCs (Logistics and Inventory) to communicate with on-premises resources, while strictly preventing inter-VPC traffic between the two workload VPCs. Which network architecture should the cloud architect recommend?

  1. Provision a Dedicated Interconnect with multiple 10 Gbps circuits using Cloud Router for dynamic BGP routing, and implement a Shared VPC topology attaching the workload projects as Service Projects.Answer
  2. B
    Provision an HA VPN gateway with multiple IPsec tunnels to aggregate 20 Gbps capacity using Cloud Router, and connect the workload VPCs to a central Hub VPC using VPC Network Peering.
  3. C
    Provision a Dedicated Interconnect with multiple 10 Gbps circuits, and connect the workload VPCs to a central Transit VPC using VPC Network Peering to allow transitive connectivity to on-premises.
  4. D
    Provision Partner Interconnect with 1 Gbps connections configured over public Internet IPSec VPN tunnels, attaching static routes in Cloud Router for each independent VPC.

Answer

Provision a Dedicated Interconnect with multiple 10 Gbps circuits using Cloud Router for dynamic BGP routing, and implement a Shared VPC topology attaching the workload projects as Service Projects.
Dedicated Interconnect is the correct hybrid connection choice for high-throughput (20 Gbps) continuous enterprise traffic requiring an enterprise SLA. Coupled with a Shared VPC architecture, the Host Project manages the Cloud Routers and Interconnect attachments while Service Projects (Logistics and Inventory) securely utilize the network paths to on-premises without relying on non-transitive VPC Peering.

Step-by-Step Solution

1
Analyze bandwidth and SLA requirements for hybrid connectivity.
The requirement specifies continuous 20 Gbps throughput with an enterprise SLA, which exceeds HA VPN limits (3 Gbps per tunnel) and demands Dedicated Interconnect.
Dedicated Interconnect is required for workloads needing high bandwidth (10 Gbps or 100 Gbps links) and direct private connection to GCP.
2
Evaluate GCP VPC network topology requirements for multi-tenant service access and isolation.
Shared VPC allows central management of subnets and hybrid Interconnect resources in a Host Project while isolating workload resources in Service Projects without transitive peering limitations.
VPC Network Peering is non-transitive and would not allow spoke VPCs to reach on-premises through a peered hub VPC.

Key Concept

Hybrid Connectivity Selection and Shared VPC Topology Design
Rate this question

Topics

Designing Network Architecture and Hybrid Connectivity