Examkin

Soru

Zorluk: Çok zorDesigning Infrastructure for Technical Requirements and High Availability

A global financial enterprise is migrating its core transaction processing application to Google Cloud. The architecture requires multi-region high availability across two Google Cloud regions with a guaranteed minimum hybrid connectivity throughput of 15 Gbps to an on-premises data center. The connection must provide 99.99% availability and withstand the failure of an entire Cloud Interconnect location or region. Additionally, client application ingress traffic must be distributed across both regions through a single static IP address, supporting sub-second failover without relying on client-side DNS caching adjustments. Which architecture design satisfies all technical, high availability, and network throughput requirements according to Google Cloud best practices?

  1. Provision 99.99% High Availability Dedicated Interconnect using four 10 Gbps circuits terminating across two edge availability domains in both GCP regions with Global Dynamic Routing enabled on the VPC, and front the application tier with a Global External Application Load Balancer targeting multi-region backend services.Cevap
  2. B
    Provision High Availability (HA) VPN with six active IPsec tunnels distributed across both GCP regions using Cloud Router dynamic routing, and front the application tier with a Global External Application Load Balancer targeting multi-region backend services.
  3. C
    Provision 99.99% High Availability Dedicated Interconnect with four 10 Gbps circuits, establish VPC Network Peering from a central transit VPC to individual application VPCs across regions to enable transitive route propagation, and configure Cloud DNS latency-based routing pointing to Regional External Load Balancers.
  4. D
    Provision 99.99% High Availability Dedicated Interconnect with four 10 Gbps circuits, front the application tier with a Global External Application Load Balancer, and configure the load balancer HTTP health check path to execute a deep database query on the backend database before returning an HTTP 200 OK status.

Cevap

Provision 99.99% High Availability Dedicated Interconnect using four 10 Gbps circuits terminating across two edge availability domains in both GCP regions with Global Dynamic Routing enabled on the VPC, and front the application tier with a Global External Application Load Balancer targeting multi-region backend services.
The correct solution provisions Dedicated Interconnect with four 10 Gbps links across two regions and two Metropolitan Availability Zones (metro edge domains) to satisfy Google Cloud's official 99.99% SLA blueprint while exceeding the 15 Gbps bandwidth threshold. Enabling Global Dynamic Routing ensures seamless cross-region BGP route propagation. Using a Global External Application Load Balancer with Anycast IP addressing ensures instant, sub-second regional failover for ingress client traffic.

Adım Adım Çözüm

1
Analyze hybrid connectivity throughput and availability constraints.
The requirement calls for 15 Gbps throughput and 99.99% availability. HA VPN is capped at 3 Gbps per tunnel and is insufficient for high-throughput enterprise connections. Dedicated Interconnect with 10 Gbps circuits is required. To achieve 99.99% SLA, four circuits must be deployed across two edge availability domains in two distinct regions.
Dedicated Interconnect provides the necessary bandwidth and SLA for mission-critical hybrid data transfers.
2
Evaluate multi-region network routing and ingress load balancing requirements.
Global Dynamic Routing must be enabled on the Cloud Router so BGP learned routes from on-premises are advertised across all regions in the custom mode VPC network. For ingress, a Global External Application Load Balancer utilizes a single Anycast IPv4/IPv6 address to route traffic to the closest healthy backend instance without relying on DNS TTL failover.
Anycast IP routing delivers sub-second traffic diversion upon regional backend failure, avoiding client DNS caching delays.
3
Identify architectural pitfalls in alternative options.
VPC Network Peering is non-transitive, eliminating centralized transit topology without Cloud Router/VPN appliances. Deep health checks hitting database backends cause false-positive node evictions under load.
Proper health checks must isolate compute instance responsiveness rather than downstream infrastructure dependencies.

Anahtar Kavram

Designing High-Availability Hybrid Networks and Global Ingress Infrastructure
Bu soruyu puanla

Konular

Designing Infrastructure for Technical Requirements and High Availability