Google Professional Cloud Architect Exam - Topic 13 Question 13 Discussion

Actual exam question for Google's Professional Cloud Architect exam

Question #: 13
Topic #: 13

[All Professional Cloud Architect Questions]

Your company has just acquired another company, and you have been asked to integrate their existing Google Cloud environment into your company's data center. Upon investigation, you discover that some of the RFC 1918 IP ranges being used in the new company's Virtual Private Cloud (VPC) overlap with your data center IP space. What should you do to enable connectivity and make sure that there are no routing conflicts when connectivity is established?

ACreate a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply new IP addresses so there is no overlapping IP space.

BCreate a Cloud VPN connection from the new VPC to the data center, and create a Cloud NAT instance to perform NAT on the overlapping IP space.

CCreate a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply a custom route advertisement to block the overlapping IP space.

DCreate a Cloud VPN connection from the new VPC to the data center, and apply a firewall rule that blocks the overlapping IP space.

Show Suggested Answer

Suggested Answer: A

To connect two networks together we need (1) either VPN or interconnect and (2) peering. When there is peering, you cannot have conflicting IP addresses. You can use either Cloud VPN or Cloud Interconnect to securely connect your on-premises network to your VPC network. (https://cloud.google.com/vpc/docs/vpc-peering#transit-network) At the time of peering, Google Cloud checks to see if there are any subnet IP ranges that overlap subnet IP ranges in the other network. If there is any overlap, peering is not established. (https://cloud.google.com/vpc/docs/vpc-peering#considerations) NAT is used to translate private to public IP and vice versa, however because we are connecting 2 networks together, they become private IPs. So it is not applicable.

by Stevie at May 05, 2022, 05:05 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bettina

4 months ago

D seems risky, blocking might lead to connectivity issues.

upvoted 0 times

...

Justine

4 months ago

Wait, overlapping IPs? How did they not catch that before?

upvoted 0 times

...

Willis

4 months ago

C sounds like a solid plan, but blocking IPs might cause issues later.

upvoted 0 times

...

Vivan

4 months ago

I think B could work too, but not sure about the NAT part.

upvoted 0 times

...

Justine

5 months ago

A is the best option, definitely need to change those IPs!

upvoted 0 times

...

Vivan

5 months ago

I vaguely remember that blocking overlapping IP space with a firewall rule might not be enough. We should probably change the IPs instead.

upvoted 0 times

...

Marlon

5 months ago

I feel like creating a Cloud Router and applying new IP addresses makes sense, but I can't recall if we need to do anything else for the VPN connection.

upvoted 0 times

...

Rolande

5 months ago

I think we practiced a similar question where we had to change IP addresses to avoid conflicts. That might be the right way to go.

upvoted 0 times

...

Theodora

5 months ago

I remember we discussed how overlapping IP ranges can cause routing issues, but I'm not sure if NAT is the best approach here.

upvoted 0 times

...

Noah

5 months ago

This question seems straightforward. I'll focus on the key attributes of DevOps - culture, practices, and mindset.

upvoted 0 times

...

Trina

5 months ago

Hmm, I'm not totally sure about the differences between all these protocols. I'll have to think this through carefully.

upvoted 0 times

...

Hubert

5 months ago

Hmm, I'm a bit unsure about this one. The options seem to cover a range of different features, and I'm not super familiar with the details of Microsoft 365 Analytics. I'll need to think this through carefully.

upvoted 0 times

...