GCP Professional Cloud Architect Practice Question

Your team must enable private connectivity between a VPC in project Alpha (under Company A's organization) and a VPC in project Beta (under Company B's organization). Requirements: - Instances must communicate only with RFC 1918 addresses. - All traffic must stay on Google's private backbone, with no VPN gateways or external IPs. - For traffic that remains in the same region, no additional egress charges should be incurred. Which design meets these requirements?

Convert project Alpha's VPC to a host network and attach project Beta as a service project using Shared VPC to achieve private, cross-organization communication.
Create Cloud VPN tunnels with Cloud Router between the VPCs; encrypted traffic will remain private and Google does not charge for VPN egress inside the same region.
Provision Dedicated Interconnect circuits to a colocation facility for each VPC, then connect the circuits together to keep traffic off the public internet and avoid egress fees.
Establish VPC Network Peering between the two VPC networks, allowing them to exchange subnet routes and communicate over internal IPs across Google's backbone without regional egress costs.

Report Issue

Answer Description

VPC Network Peering creates a private connection between two VPC networks that can belong to different projects or even different organizations. The peering exchange advertises each network's subnet routes, so virtual machines can reach one another by internal (RFC 1918) IP addresses. Traffic traverses Google's private backbone; no VPN tunnelling or external IPs are involved. Intraregional peered-network traffic is treated as internal and does not incur extra egress charges. Cloud VPN and Dedicated Interconnect either traverse public infrastructure or are intended for on-premises connectivity and still incur network egress costs. Shared VPC cannot connect VPCs across organizations and requires moving subnets into a single host project, which does not fit the scenario.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.