Examkin

Soru

Zorluk: OrtaConfiguring Network Topology and VPC Infrastructure

An enterprise organization maintains two Virtual Private Cloud (VPC) networks, vpc-core and vpc-analytics, located in separate Google Cloud projects. The vpc-core network connects to an on-premises enterprise network using a Cloud Router and Dedicated Interconnect, dynamically learning on-premises IP subnets via BGP. A network administrator establishes a VPC Network Peering connection between vpc-core and vpc-analytics. Virtual machine instances hosted within vpc-analytics must be able to reach on-premises destinations using the existing Cloud Router in vpc-core. Which configuration is required on the VPC Network Peering connection to satisfy this connectivity requirement?

  1. Configure the VPC Network Peering configuration in vpc-core to export custom routes, and configure the peering configuration in vpc-analytics to import custom routes.Cevap
  2. B
    Establish a third intermediary hub VPC network peered to both vpc-core and vpc-analytics to leverage default transitive routing across VPC Network Peering paths.
  3. C
    Replace the VPC Network Peering setup with an HA VPN tunnel pairing between vpc-core and vpc-analytics because VPC Network Peering cannot exchange dynamically learned BGP routes.
  4. D
    Add control plane master authorized networks inside the vpc-core firewall rules to grant external subnet access to remote Cloud Routers automatically.

Cevap

Configure the VPC Network Peering configuration in vpc-core to export custom routes, and configure the peering configuration in vpc-analytics to import custom routes.
VPC Network Peering exchanges subnet routes by default, but to share dynamically learned BGP routes (such as those learned over Cloud Router from an Interconnect), custom route flags must be configured. The network originating or holding the routes must export custom routes, and the peer network consuming those routes must import custom routes.

Adım Adım Çözüm

1
Identify the routing requirement across peered VPC networks.
Dynamic BGP routes learned from on-premises via Cloud Router in vpc-core need to be visible in vpc-analytics.
By default, VPC Network Peering only exchanges subnet routes, not dynamically learned routes or static custom routes.
2
Determine the appropriate custom route flags on the peering relationship.
The vpc-core network must set export_custom_routes to true, and vpc-analytics must set import_custom_routes to true.
This configuration explicitly authorizes the propagation of custom dynamic routes across the VPC Network Peering boundary.

Anahtar Kavram

VPC Network Peering Custom Route Exchange
Bu soruyu puanla

Konular

Configuring Network Topology and VPC Infrastructure

Bu konudan daha fazla soru