Medium1 markMultiple Choice
Domain 1: Designing and Planning a Cloud Solution ArchitectureCloud InterconnectPrivate Google AccessHybrid Cloud

GCP PCA · Question 36 · Domain 1: Designing and Planning a Cloud Solution Architecture

You are designing a hybrid cloud architecture. Your on-premises data center must connect to Google Cloud to access a large BigQuery dataset and several internal Compute Engine APIs. The connection must be highly available (99.99%), provide at least 10 Gbps of bandwidth, and traffic must not traverse the public internet. Which TWO actions should you take? (Select TWO)

Answer options:

A.

Provision Dedicated Interconnect with two connections in Metro A and two connections in Metro B.

B.

Deploy HA VPN over the public internet.

C.

Enable Private Google Access for on-premises hosts.

D.

Configure VPC Peering between the on-premises router and the GCP VPC.

E.

Deploy a Cloud NAT gateway in the GCP VPC.

How to approach this question

Identify the service for high-bandwidth private connectivity (Interconnect) and the feature that allows on-prem to reach Google APIs (Private Google Access).

Full Answer

Provision Dedicated Interconnect with two connections in Metro A and two connections in Metro B. Enable Private Google Access for on-premises hosts.
To achieve 10 Gbps without traversing the internet, Dedicated Interconnect is required. To get the 99.99% SLA, you must use the topology with 4 cross-connects across 2 metros (Option A). Because BigQuery is a Google API (not a VM in a VPC), you must configure Private Google Access for on-premises hosts (Option C) to route traffic to `restricted.googleapis.com` over the Interconnect.

Common mistakes

Selecting HA VPN (B) ignores the 'no public internet' constraint.

Practice the full GCP Professional Cloud Architect Practice Exam 4

50 questions · hints · full answers · grading

More questions from this exam