Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network. How should you deploy the VPN?
A.
Use VPC Network Peering between the VPC and the on-premises network.
B.
Expose the VPC to the on-premises network using IAM and VPC Sharing.
C.
Create a global Cloud VPN Gateway with VPN tunnels from each region to the on-premises peer gateway.
D.
Deploy Cloud VPN Gateway in each region. Ensure that each region has at least one VPN tunnel to the on-premises peer gateway.
It can't be -A - VPC Network Peering only allows private RFC 1918 connectivity across two Virtual Private Cloud (VPC) networks. In this example is one VPC with on-premise network
https://cloud.google.com/vpc/docs/vpc-peering
It is not definitely - B - Can't be
It is not C - Because Cloud VPN gateways and tunnels are regional objects, not global
So, it the answer is D -
https://cloud.google.com/vpn/docs/how-to/creating-static-vpns
Why not A?
https://cloud.google.com/vpc/docs/vpc-peering#benefits_of_exchanging_custom_routes
The second use case is exactly what is in the question.
Don't get the argument about RFC 1918.
Will go with A
https://cloud.google.com/vpc/docs/vpc-peering allows internal IP address connectivity across two VPC so A is not the answer as the on premise network need to use public IP. cmiiw
Global Cloud VPN Gateway: This feature allows for the creation of a single VPN gateway that can serve multiple regions within the same VPC network. By creating a global VPN gateway, you can efficiently manage VPN connections from all regions of your VPC to your on-premises network.
Simplicity and Efficiency: Using a global gateway simplifies the configuration and management of VPN connections as opposed to maintaining separate regional VPN gateways. It centralizes the VPN endpoint on the Google Cloud side, reducing the complexity of the network setup.
Reliable and Secure Communication: The global Cloud VPN Gateway allows for secure, encrypted tunnels between Google Cloud and the on-premises network, ensuring that the application’s inter-regional and on-premises communications are secure.
C is wrong. A global vpn is a single region resource.
https://cloud.google.com/network-connectivity/docs/vpn/how-to/creating-ha-vpn?hl=it
gcloud compute vpn-gateways create GW_NAME \
--network=NETWORK \
--region=REGION \
--stack-type=IP_STACK
so D is the answer
It´s option C! So, while the VPN Gateway itself is a regional resource, its scope can be effectively global as it can serve resources across different regions within the same Virtual Private Cloud (VPC). This is why it’s sometimes referred to as a ‘global’ service in the context of its functionality, even though strictly speaking, it’s a regional resource.
Each Cloud VPN gateway is a regional resource that uses one or more regional external IP addresses. A Cloud VPN gateway can connect to a peer VPN gateway.
It can't be -A - VPC Network Peering only allows private RFC 1918 connectivity across two Virtual Private Cloud (VPC) networks. In this example is one VPC with on-premise network https://cloud.google.com/vpc/docs/vpc-peering It is not definitely - B - Can't be It is not C - Because Cloud VPN gateways and tunnels are regional objects, not global So, it the answer is D - https://cloud.google.com/vpn/docs/how-to/creating-static-vpn
Why not C? services across regions can communicate to each other, VPN only connects to the closet region, and all the VPC shall be connected if firewall's set.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Googler2
Highly Voted 4 years agoamxexam
2 years, 7 months agoochanz
2 years, 4 months agoAdityaGupta
6 months, 3 weeks agoAzureDP900
1 year, 6 months agoTaherShaker
Highly Voted 3 years, 5 months agoM_Asep
2 years, 4 months agoSur_Nikki
11 months, 3 weeks agosantoshchauhan
Most Recent 1 month agosalvo007
3 months, 3 weeks agogcmrjbr
4 months agoAdityaGupta
6 months, 3 weeks agoLaxmanTiwari
11 months, 3 weeks agovvkds
1 year, 3 months agooms_muc
1 year, 4 months agomegumin
1 year, 5 months agoMahmoud_E
1 year, 6 months agozr79
1 year, 6 months agoDrishaS4
1 year, 8 months agoelaineshi
1 year, 11 months agoharoldbenites
2 years, 4 months agovincy2202
2 years, 5 months agojoe2211
2 years, 5 months ago