Soru

Zorluk: ZorDesigning Network Architecture and Hybrid Connectivity

A global financial intelligence firm is deploying a hybrid cloud architecture to connect its primary data center to Google Cloud. The workload requires a dedicated network link providing 15 Gbps of sustained throughput with predictable low latency to a central network hub. Additionally, multiple project teams require secure, isolated network environments that can directly access on-premises databases without traversing public internet endpoints. Which TWO architectural decisions should the lead cloud architect implement to meet these requirements? (Select TWO)

  1. Provision Dedicated Interconnect connections with Cloud Router dynamic BGP routing to satisfy the throughput and low-latency requirements.Cevap
  2. Configure a Shared VPC architecture where isolated teams deploy workloads into service projects attached to the host VPC containing the hybrid interconnect.Cevap
  3. C
    Deploy an HA VPN gateway with multiple encrypted IPSec tunnels operating over the public internet to scale throughput dynamically.
  4. D
    Establish VPC Network Peering between individual project VPCs and a central hub VPC where the hybrid connection terminates so on-premises traffic can transit through the hub.

Cevap

The architect must provision Dedicated Interconnect with Cloud Router BGP routing to support 15 Gbps throughput and configure a Shared VPC network with service projects to grant isolated team workloads direct access to on-premises resources.
The combination of Dedicated Interconnect with Cloud Router dynamic BGP routing and a Shared VPC topology correctly satisfies all requirements. Dedicated Interconnect handles high-throughput (15 Gbps) requirements with low latency over private circuits. Shared VPC provides centralized control over hybrid connectivity while enabling isolated service projects to securely access on-premises databases directly through the host network without relying on transitive VPC peering.

Adım Adım Çözüm

1
Evaluate hybrid connectivity bandwidth and performance requirements.
Identified that 15 Gbps sustained throughput exceeds Cloud VPN maximum single-tunnel capacities (3 Gbps) and requires Dedicated Interconnect (10 Gbps or 100 Gbps circuits).
Dedicated Interconnect delivers physical private circuits suitable for high-bandwidth enterprise traffic requiring SLA-backed performance.
2
Evaluate cross-project network isolation and hybrid access constraints.
Determined that Shared VPC allows service project workloads to directly use host VPC subnet routes leading to on-premises networks.
VPC Network Peering does not support transitive routing from on-premises to peered spokes, whereas Shared VPC natively exposes host connectivity to service projects.

Anahtar Kavram

Designing High-Throughput Hybrid Connectivity and Shared VPC Architectures
Bu soruyu puanla