GCP Professional Cloud Architect Practice Question

Your company is migrating latency-sensitive microservices to Google Cloud while keeping the primary Oracle database in its on-premises data center. Average traffic between the services and the database is 12 Gbps and must never traverse the public internet. Compliance requires a documented 99.9 % or better connectivity SLA, and network engineers insist on dynamically exchanging on-premises and VPC routes by using BGP. The company already maintains racks in a carrier-neutral facility that hosts a Google edge POP. Which connectivity design best meets the requirements while minimizing operational complexity?

Order a single 50 Mbps Partner Interconnect attachment through a service provider and establish one Cloud Router BGP session.
Provision Dedicated Interconnect with two 10 Gbps circuits in separate edge availability domains, create redundant VLAN attachments, and connect each to a Cloud Router to exchange BGP routes.
Set up two HA Cloud VPN tunnels from on-premises routers to separate Cloud VPN gateways and enable dynamic routing.
Configure VPC Network Peering between the on-premises data-center network and the Google Cloud VPC.

Report Issue

Answer Description

Dedicated Interconnect offers private Layer 2 connectivity that never uses the public internet. A redundant deployment with two 10 Gbps circuits placed in separate edge availability domains (each with its own VLAN attachment) meets Google's documented 99.9 % connectivity SLA for Dedicated Interconnect. Attaching each VLAN to its own Cloud Router enables dynamic BGP route exchange between the on-premises network and the VPC.

Cloud VPN provides encrypted paths but still traverses the public internet and offers a higher 99.99 % SLA only in HA mode while being limited to 3 Gbps per tunnel, so it cannot meet the sustained 12 Gbps throughput requirement without significant complexity. Partner Interconnect can meet the bandwidth target, but a 50 Mbps attachment is far below 12 Gbps and, without a second attachment in another availability domain, cannot meet the 99.9 % SLA. VPC Network Peering connects only Google Cloud VPCs; it does not solve on-premises connectivity.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.