Professional Cloud Network EngineerDemo

By Google · Question Mode

QuestionQ291

Designing and planning a Google Cloud Virtual Private Cloud (VPC) network

You are designing a hub-and-spoke network architecture for your company’s cloud-based environment. You must ensure that every spoke is peered with the hub. The spokes must use the hub’s virtual appliance to access the internet. The virtual appliance is configured in high-availability mode with two instances behind an internal load balancer at IP address 10.0.0.5.

What should you do?

  • A
    1. Create a default route in the hub VPC that points to IP address 10.0.0.5.2. Delete the default internet gateway route in the hub VPC, and create a new higher-priority route that is tagged only to the appliances with a next hop of the default internet gateway.3. Export the custom routes in the hub.4. Import the custom routes in the spokes.
  • B
    1. Create a default route in the hub VPC that points to IP address 10.0.0.5.2. Delete the default internet gateway route in the hub VPC, and create a new higher-priority route that is tagged only to the appliances with a next hop of the default internet gateway.3. Export the custom routes in the hub. Import the custom routes in the spokes.4. Delete the default internet gateway route of the spokes.
  • C
    1. Create two default routes in the hub VPC that point to the next hop instances of the virtual appliances.2. Delete the default internet gateway route in the hub VPC, and create a new higher-priority route that is tagged only to the appliances with a next hop of the default internet gateway.3. Export the custom routes in the hub. Import the custom routes in the spokes.
  • D
    1. Create a default route in the hub VPC that points to IP address 10.0.0.5.2. Delete the default internet gateway route in the hub VPC, and create a new higher-priority route that is tagged only to the appliances with a next hop of the default internet gateway.3. Create a new route in the spoke VPC that points to IP address 10.0.0.5.
Explanation

An untagged custom 0.0.0.0/0 route using the internal load balancer as its next hop can be exported from the hub and imported into the spokes. A spoke’s system-generated default route to the default internet gateway is a local static route and takes precedence over an identical imported peering route, so that local default route must be deleted. A higher-priority, appliance-tagged route to the default internet gateway preserves outbound internet connectivity for the appliance instances themselves.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!