Discuss Google Professional Cloud Network Engineer Exam Topic 4 Question 112

Your organization has resources in two different VPCs, each in different Google Cloud projects, and requires connectivity between the resources in the two VPCs. You have already determined that there is no IP address overlap; however, one VPC uses privately used public IP (PUPI) ranges. You would like to enable connectivity between these resources by using a lower cost and higher performance method. What should you do?

ACreate an HA VPN between the two VPCs that includes the PUPI ranges in the custom route advertisements of the Cloud Router. Create the necessary ingress VPC firewall rules that target the specific resources by using IP ranges as the source filter.

BCreate a VPC Network Peering connection between the two VPCs that allows the export and import of custom routes for public IP addresses. Create the necessary ingress VPC firewall rules that target the specific resources by using service accounts as the source filter.

CCreate a VPC Network Peering connection between the two VPCs that allows the export and import of subnet routes with public IP addresses. Create the necessary ingress VPC firewall rules that target the specific resources by using IP ranges as the source filter.

DCreate a VPC Network Peering connection between the two VPCs that allows the export and import of subnet routes with public IP addresses. Create the necessary ingress VPC firewall rules that target the specific resources by using network tags as the source filter.

Suggested Answer: C

VPC Network Peering is the most cost-effective and high-performance method for connecting two VPCs. Since one VPC uses privately used public IP (PUPI) ranges, you need to configure peering to allow the export and import of subnet routes with public IP addresses. Firewall rules can be used to control traffic between the resources.

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

29 comments · newest first

Marnie 6 months ago

I like option B, but we need to consider cost-effectiveness too.

Genevieve 7 months ago

I feel like option A is more straightforward for our needs.

Alaine 7 months ago

Option D sounds good, especially with network tags for security.

Fidelia 7 months ago

I'm leaning towards option C. Subnet routes are crucial for performance.

Nikita 7 months ago

D is solid, especially with network tags for filtering.

Laine 7 months ago

Wait, can you really use PUPI ranges with VPC Peering?

Eileen 8 months ago

I think A is more reliable with HA VPN.

Dyan 8 months ago

Option B seems like the best choice for custom routes.

Haydee 8 months ago

I'm just going to close my eyes and point at an answer. That's the only way I'm going to get this right.

Lanie 8 months ago

Hmm, this seems like a tricky one. I'm going to have to put on my thinking cap for this one.

Devora 9 months ago

Wait, what's a PUPI range? Is that like some kind of new Pokemon or something?

Katina 9 months ago

Ah, the joys of VPC connectivity. I feel like I need a PhD in networking just to understand this stuff.

Santos 9 months ago

This question is a real head-scratcher! I'm scratching my head just trying to figure it out.

Emilio 9 months ago

I lean towards option C since it talks about subnet routes, but I’m not entirely sure if it’s the best choice for handling public IPs. I need to double-check the firewall rules too.

Hermila 9 months ago

I think option A sounds right because it mentions HA VPN, which I remember is good for performance. But I'm a bit confused about the PUPI ranges and how they fit in.

Colette 9 months ago

I practiced a similar question where we had to choose between VPN and peering. I feel like peering is usually the cheaper option, but I can't recall the specifics about the firewall rules.

Becky 10 months ago

Alright, I think I've got a handle on this. Based on the requirements, Option C looks like the way to go. VPC Network Peering with public IP address subnet route exchange seems like the most straightforward and cost-effective solution. Now I just need to make sure I understand the firewall rule setup correctly.

Portia 10 months ago

I'm a bit confused by the PUPI ranges and how that impacts the connectivity. I think I need to understand that concept better before I can decide on the best approach. Maybe I'll start by researching PUPI and how it differs from normal public IP addresses.

Tanesha 10 months ago

I agree, but option A could work too. HA VPN is reliable.

Mireya 10 months ago

I remember studying VPC peering, but I'm not sure if it supports PUPI ranges. I think it might be a good option, though.

Rosendo 10 months ago

I think option B is the best choice. Network peering is efficient.

Kimbery 11 months ago

I disagree, C doesn't seem to address the PUPI issue properly.

Truman 11 months ago

Okay, let me see. I think the key is figuring out how to handle the PUPI ranges in the VPC. Option A mentions using a Cloud Router, which could work, but I'm not sure if that's the "lower cost" part. I'll need to look into that more.

Jonelle 11 months ago

Hmm, this seems like a tricky one. I'll need to carefully read through the options and think about the key requirements - connectivity between VPCs, no IP overlap, and using a lower cost/higher performance method.

Corrie 6 months ago

↳ replying to Jonelle

I’m confused about the firewall rules. Which source filter is best?

Mona 6 months ago

↳ replying to Jonelle

C seems solid too, especially with the subnet routes.

Marya 6 months ago

↳ replying to Jonelle

I’m leaning towards A. The HA VPN might offer better performance.

Loreen 6 months ago

↳ replying to Jonelle

But does it really handle the PUPI ranges well?

Jestine 11 months ago

↳ replying to Jonelle

I think option B could be a good choice. Network peering sounds efficient.

Google Professional Cloud Network Engineer Exam - Topic 4 Question 112 Discussion