An enterprise organization is designing a high-availability hybrid architecture to connect their on-premises data center to a Google Cloud Virtual Private Cloud (VPC). The workload requires continuous active-active data transfers with an aggregate throughput exceeding 10 Gbps and strict protection against unauthorized data exfiltration to external Google Cloud projects. Which two configurations should you implement to satisfy both technical bandwidth and high availability requirements?
- Provision a Dedicated Interconnect with redundant VLAN attachments across two distinct edge availability domains (zones) in a single metro.Cevap
- Establish VPC Service Controls perimeters around the project resources to restrict data movements to authorized projects and services.Cevap
- CDeploy multiple High Availability (HA) VPN tunnels configured in parallel and rely on ECMP routing to achieve 15 Gbps throughput.
- DConnect the on-premises environment to a central transit VPC and rely on VPC Network Peering to transit traffic automatically to destination VPCs.
- EApply restrictive IAM roles exclusively across service accounts and users without enforcing VPC Service Controls.
Cevap
To meet high availability, high throughput, and anti-exfiltration requirements, configure Dedicated Interconnect with redundant VLAN attachments across edge availability domains and establish VPC Service Controls around the project resources.
For hybrid interconnectivity with throughput demands exceeding 10 Gbps, Dedicated Interconnect with redundant VLAN attachments across edge availability domains provides high-availability multi-gigabyte connectivity. To secure the cloud environment against data exfiltration, VPC Service Controls define network security perimeters around Google Cloud resources that prevent data from being copied to untrusted external projects, even by authorized IAM users.
Adım Adım Çözüm
Anahtar Kavram
Designing High-Availability Hybrid Networking and Network Security Perimeters