Google Professional Cloud Network Engineer Exam - Topic 4 Question 3 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam

Question #: 3
Topic #: 4

[All Professional Cloud Network Engineer Questions]

You want to deploy a VPN Gateway to connect your on-premises network to GCP. You are using a non BGP-capable on-premises VPN device. You want to minimize downtime and operational overhead when your network grows. The device supports only IKEv2, and you want to follow Google-recommended practices.

What should you do?

A* Create a Cloud VPN instance.* Create a policy-based VPN tunnel per subnet.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Create the appropriate static routes.

B* Create a Cloud VPN instance.* Create a policy-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Configure the appropriate static routes.

C* Create a Cloud VPN instance.* Create a route-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Configure the appropriate static routes.

D* Create a Cloud VPN instance.* Create a route-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to 0.0.0.0/0.* Configure the appropriate static routes.

Show Suggested Answer

Suggested Answer: D

by Alisha at May 08, 2022, 08:54 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Micaela

4 months ago

Not sure if D is a good idea, 0.0.0.0/0 sounds risky.

upvoted 0 times

...

Diego

4 months ago

Wait, can you really use IKEv2 with policy-based tunnels?

upvoted 0 times

...

Maurine

4 months ago

C seems off, route-based is usually more flexible.

upvoted 0 times

...

Lauran

4 months ago

I think B is better, less complexity.

upvoted 0 times

...

Karan

5 months ago

A is the way to go for policy-based setups.

upvoted 0 times

...

Glenn

5 months ago

I recall that route-based tunnels are more flexible, but since the device only supports IKEv2, I think I should stick with policy-based options like A or B.

upvoted 0 times

...

Luther

5 months ago

I’m a bit confused about the traffic selectors. I thought they needed to match specific subnets, so I’m leaning towards option A, but I’m not entirely sure.

upvoted 0 times

...

Vannessa

5 months ago

I think I practiced a similar question where I had to decide between policy-based and route-based tunnels. I feel like option C might be the right choice, but IKEv2 complicates things.

upvoted 0 times

...

Jules

5 months ago

I remember that policy-based VPNs are often used with non-BGP devices, but I'm not sure if I should choose option A or B.

upvoted 0 times

...

Rikki

5 months ago

I agree, those seem like the most logical choices. I'll also consider the decisions that deliver large economic benefits, since those would be important to keep centralized.

upvoted 0 times

...

Glory

5 months ago

I've seen this type of question before, and I think the answer is B. The Init state should be executed again to handle the error. But I'll double-check the options just to be sure.

upvoted 0 times

...

Mozell

5 months ago

Okay, I've got this. I know that reports can be graphical and can be scheduled to run automatically, so I'm pretty confident about those. Let me double-check the other options.

upvoted 0 times

...