GCP Professional Cloud Architect Practice Question

Your company is moving latency-sensitive services to Google Cloud but will keep several backend databases on-premises. The services must exchange up to 15 Gbps of traffic with the on-prem data center over private RFC 1918 addresses and require a 99.99 percent connectivity SLA. Which hybrid-networking design best meets these requirements while minimizing operational complexity?

Establish two 10 Gbps Dedicated Interconnect circuits in different edge availability domains in the same metro, each attached to its own Cloud Router for dynamic BGP routing.
Use Cloud NAT for all egress traffic from Google Cloud and allow on-prem systems to connect over the public internet using the NAT-exposed IP addresses.
Deploy two HA VPN gateways over separate ISPs, create four active IPsec tunnels, and rely on dynamic routing to aggregate up to 16 Gbps of throughput.
Order a single 10 Gbps Partner Interconnect connection from one service provider and advertise on-prem routes through one Cloud Router.

Report Issue

Answer Description

Dedicated Interconnect offers predictable, low-latency, private connectivity because traffic never traverses the public internet. A single 10 Gbps circuit is insufficient for 15 Gbps and cannot reach the 99.99 percent SLA. Google recommends at least two redundant 10 Gbps Dedicated Interconnect connections in separate edge locations (or availability domains) with separate Cloud Routers; this combination delivers the needed bandwidth and the 99.99 percent uptime SLA with dynamic BGP route exchange and requires little ongoing management once provisioned.

Partner Interconnect with only one 10 Gbps link fails both the bandwidth and redundancy requirements. HA VPN can achieve a 99.99 percent SLA if built redundantly, but it rides over the public internet, so it cannot guarantee low latency. Cloud NAT provides no inbound private connectivity and is inappropriate for hybrid private networking. Therefore, the dual Dedicated Interconnect design is the correct choice.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.