GCP Professional Cloud Architect Practice Question

Your company is migrating latency-sensitive microservices to Google Cloud while keeping the primary Oracle database in its on-premises data center. Average traffic between the services and the database is 12 Gbps and must never traverse the public internet. Compliance requires a documented 99.9 % or better connectivity SLA, and network engineers insist on dynamically exchanging on-premises and VPC routes by using BGP. The company already maintains racks in a carrier-neutral facility that hosts a Google edge POP. Which connectivity design best meets the requirements while minimizing operational complexity?

Provision Dedicated Interconnect with two 10 Gbps circuits in separate edge availability domains, create redundant VLAN attachments, and connect each to a Cloud Router to exchange BGP routes.
Set up two HA Cloud VPN tunnels from on-premises routers to separate Cloud VPN gateways and enable dynamic routing.
Configure VPC Network Peering between the on-premises data-center network and the Google Cloud VPC.
Order a single 50 Mbps Partner Interconnect attachment through a service provider and establish one Cloud Router BGP session.

Report Issue

Answer Description

Dedicated Interconnect offers private Layer 2 connectivity that never uses the public internet. A redundant deployment with two 10 Gbps circuits placed in separate edge availability domains (each with its own VLAN attachment) meets Google's documented 99.9 % connectivity SLA for Dedicated Interconnect. Attaching each VLAN to its own Cloud Router enables dynamic BGP route exchange between the on-premises network and the VPC.

Cloud VPN provides encrypted paths but still traverses the public internet and offers a higher 99.99 % SLA only in HA mode while being limited to 3 Gbps per tunnel, so it cannot meet the sustained 12 Gbps throughput requirement without significant complexity. Partner Interconnect can meet the bandwidth target, but a 50 Mbps attachment is far below 12 Gbps and, without a second attachment in another availability domain, cannot meet the 99.9 % SLA. VPC Network Peering connects only Google Cloud VPCs; it does not solve on-premises connectivity.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.