Professional Cloud Architect · Free Practice Question Hard
Question 37
An international retail chain is planning to extend its on-premises IT infrastructure to Google Cloud. The on-premises network is segmented into multiple VLANs to separate traffic for different departments, such as sales, inventory management, and finance. The company requires that these VLANs are extended to Google Cloud to maintain the same level of network segmentation and security controls. Additionally, the network extension must support dynamic routing updates as the company frequently adjusts its network topology based on changing business needs. Which solution would best allow the company to extend its on-premises VLANs to Google Cloud while supporting dynamic routing and maintaining network segmentation?
-
A
Set up a Cloud VPN tunnel for each VLAN, ensuring secure communication between on-premises segments and corresponding Google Cloud subnets.
-
B
Implement VPC peering between the on-premises data center and Google Cloud, mapping each VLAN to a separate VPC subnet.
-
C
Deploy a Cloud CDN in front of each department's resources in Google Cloud to cache content and reduce the need for a direct network extension.
-
D
Use a Dedicated Interconnect to extend the on-premises network to Google Cloud and configure VLAN attachments for each department, with dynamic routing enabled via Cloud Router.
Reveal correct answer
Correct answer: D
A.
While setting up multiple VPN tunnels could provide secure connections, it does not scale well for a large number of VLANs and could introduce complexity in managing these connections. Additionally, Cloud VPN alone does not support dynamic routing, which is a critical requirement for the company.
B.
VPC peering is used to connect VPC networks within Google Cloud but is not designed to directly extend on-premises VLANs to the cloud. It also does not support dynamic routing updates, which is a requirement for this scenario.
C.
Cloud CDN is used for caching and serving content from locations closer to users, which is unrelated to extending VLANs or maintaining network segmentation. This solution does not meet the company’s requirements for hybrid networking or dynamic routing.
D.
This is the correct answer because Dedicated Interconnect allows the company to extend its VLANs to Google Cloud using VLAN attachments, preserving network segmentation. Cloud Router supports dynamic routing, enabling the on-premises environment and Google Cloud to exchange routes automatically as the network topology changes, fulfilling all the company's requirements.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
