Examkin

Soru

Zorluk: OrtaDesigning Network Architecture and Hybrid Connectivity

A multinational automotive software enterprise is connecting its on-premises build servers to Google Cloud. The workload requires a sustained network throughput of 8 Gbps between on-premises data centers and Google Cloud resources. Additionally, the company operates three separate environments in Google Cloud—Production, Staging, and Shared Services—that all require private connectivity to on-premises resources. The network engineering team wants to centralize network administration, avoid creating separate hybrid connections for each environment, and eliminate routing issues caused by VPC Network Peering non-transitivity. Which network architecture should you recommend?

  1. A
    Provision an HA VPN setup with multiple active IPsec tunnels for each of the three VPCs, and configure static routes on each Cloud Router to achieve the required 8 Gbps bandwidth.
  2. Design a Shared VPC architecture using a central Host VPC with Dedicated Interconnect and Cloud Router, and attach the Production, Staging, and Shared Services projects as Service Projects sharing the Host VPC subnets.Cevap
  3. C
    Establish a Dedicated Interconnect connection in a central Hub VPC, and set up VPC Network Peering between the Hub VPC and each Spoke VPC (Production, Staging, and Shared Services) to route on-premises traffic through the Hub VPC.
  4. D
    Establish an HA VPN gateway in a central Hub VPC, peer the Hub VPC to the three Spoke VPCs using VPC Network Peering, and enable custom route exports on all peering connections.

Cevap

Design a Shared VPC architecture using a central Host VPC with Dedicated Interconnect and Cloud Router, and attach the Production, Staging, and Shared Services projects as Service Projects sharing the Host VPC subnets.
The correct solution uses Shared VPC with Dedicated Interconnect. Shared VPC allows central management of network resources (such as Cloud Routers and Interconnect VLAN attachments) in a Host VPC. Because Service Projects (Production, Staging, Shared Services) share subnets within the same Host VPC network, all resources can communicate directly with on-premises networks over the 8 Gbps Dedicated Interconnect without being blocked by VPC Network Peering non-transitivity.

Adım Adım Çözüm

1
Evaluate throughput requirement against hybrid connectivity options.
Sustained 8 Gbps bandwidth exceeds standard HA VPN single tunnel limits (typically 3 Gbps per tunnel), indicating Dedicated Interconnect or high-bandwidth Partner Interconnect is required.
Choosing the appropriate hybrid connection type prevents bandwidth bottlenecks under heavy load.
2
Evaluate multi-VPC routing requirements and constraints.
VPC Network Peering is non-transitive, meaning peered spokes cannot reach on-premises networks through a central hub's hybrid connection.
Understanding network topology constraints avoids invalid transitive routing designs.
3
Select centralized topology pattern.
Shared VPC allows network admins to maintain Interconnect attachments and Cloud Routers in a Host VPC while letting Service Projects (Production, Staging, Shared Services) utilize those network paths directly within a single logical network perimeter.
Shared VPC eliminates non-transitivity issues and avoids redundant connection provisioning.

Anahtar Kavram

Shared VPC vs VPC Peering with Interconnect for Hybrid Connectivity
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Designing Network Architecture and Hybrid Connectivity