Professional Cloud Network Engineer Exam - Question 53

Question

Your software team is developing an on-premises web application that requires direct connectivity to Compute Engine Instances in GCP using the RFC 1918 address space. You want to choose a connectivity solution from your on-premises environment to GCP, given these specifications:

✑ Your ISP is a Google Partner Interconnect provider.

✑ Your on-premises VPN device's internet uplink and downlink speeds are 10 Gbps.

✑ A test VPN connection between your on-premises gateway and GCP is performing at a maximum speed of 500 Mbps due to packet losses.

✑ Most of the data transfer will be from GCP to the on-premises environment.

✑ The application can burst up to 1.5 Gbps during peak transfers over the Interconnect.

✑ Cost and the complexity of the solution should be minimal.

How should you provision the connectivity solution?

Examice · Accepted Answer

Provisioning a Partner Interconnect through your ISP is the most appropriate solution. Partner Interconnect can offer a dedicated and reliable connection with defined bandwidth capabilities, which aligns well with the application's peak transfer requirement of 1.5 Gbps. Additionally, since the ISP is already a Google Partner Interconnect provider, the setup will be straightforward, minimizing both cost and complexity. Dedicated Interconnect, while providing a higher guaranteed bandwidth, would involve a more complex and potentially costlier setup process. Creating multiple VPN tunnels to counter packet loss and using ECMP would increase the complexity of the solution and might not effectively address the packet loss issues or provide the necessary bandwidth consistently. Network compression over VPNs would not sufficiently mitigate the packet loss problems and might not meet the required speeds for peak transfers.

garbad · Answer

Answer is A,

cost and complexity  of multiple tunnel vpn  is very high, also , dedicated interconnect is not required as required max speed is 1.5gbps
Also , direct connectivity is bogus verb, all the solution provide direct connectivity to your vpc instance , once connected through router

JohnnyBG · Answer

Everybody that says C please do not take this exam and never be consulted for network related question ...

ThisisJohn · Answer

I would vote for A because of this statement " Most of the data transfer will be from GCP to the on-premises environment.".

According to the documentation, carrier peering "Has reduced internet egress rates to your on-premises network " while Cloud VPN "Has standard egress rates for traffic sent through an Interconnect connection;"  https://cloud.google.com/network-connectivity/docs/how-to/choose-product#cp-compare

desertlotus1211 · Answer

https://cloud.google.com/blog/products/networking/google-cloud-network-connectivity-options-explained

Answer A is better...

Mr_MIXER007 · Answer

AAAAAAAAAA

jeeet_ · Answer

C,
Question is challenging. 
--> application can burst upto 1.5Gbps, 
--> Cloud VPN- can burst upto 3Gbps, and with double VPN we can minimize packet loss and bandwidth upto 6Gbps,
-> Interconnect initial setup is complex, you need to email to google, then talk to your vendor (which is google itself) and common peer zone. It's time consuming.

Since they already have a single tunnel VPN, setting up another won't take much of time.

MrPajonko · Answer

It states that private RFC 1918 ip addressing is required. Partner Interconnect doesn't use private IP addressing, public only. Correct answer is C.

kumarp6 · Answer

Answer is : A

vladani · Answer

Ans - A

Moran12 · Answer

Partner would be cost effective as egress traffic would be lower than vpn

Komal697 · Answer

Option B, provisioning a Dedicated Interconnect, is the most appropriate solution because it can provide a dedicated, private, high-speed connection between the on-premises environment and GCP. Dedicated Interconnects offer a guaranteed bandwidth of up to 10 Gbps, and can be upgraded for burstable traffic as needed. Additionally, they offer SLAs for reliability and support.

xhilmi · Answer

Partner Interconnect (Option A): This solution involves using your ISP as a Google Partner Interconnect provider. It establishes a connection between your on-premises network and Google's network through the service provider. Partner Interconnect can offer a dedicated and reliable connection with specified bandwidth.

Given the requirement for direct connectivity, the fact that your ISP is a Google Partner Interconnect provider, and considering factors like minimal cost and complexity, this could indeed be a suitable choice.

seddy · Answer

C for sure!
Key elements: 1) Direct Connectivity (cannot be partner inter)
                         2) Cannot be Dedicated bc we want low cost
                         3) Multiple VPN tunnels with ECMP will help us deal with packet losses

Peace :)

pk349 · Answer

•	C. Create multiple VPN ***** tunnels to account for the packet losses, and increase bandwidth using ECMP.
It’s very common to use parallel links to increase bandwidth. This mechanism is often called equal-cost multipath (ECMP). ECMP often works well, but there are a few caveats. Before we get to the issue of running BGP over parallel links, it’s important to look at how traffic is split over multiple parallel links.
Dedicated Interconnect provides a direct physical connection between your on-premises network and Google's network. Partner Interconnect provides connectivity between your on-premises and VPC networks through a supported service provider.

Popa · Answer

It is A, partner interconnect. It supports RFC 1918 as well as required max speed. https://cloud.google.com/hybrid-connectivity/

desertlotus1211 · Answer

Do the math people: https://cloud.google.com/network-connectivity/pricing#partner-pricing

A 2 tunnel VPN is $297.80 per month.... A PI is $2.36 per hour per VLAN attachment (@10Gigs) plus data transfer.... ARE YOU SURE IT'S CHEAPER THAN VPN PER MONTH?

nkastanas · Answer

Dedicated Interconnect is for organizations that need high bandwidth, low latency, and have the capability to manage a direct physical connection in a colocation facility.
Partner Interconnect is for organizations that prefer a simpler, more flexible setup and do not have the infrastructure to support a Dedicated Interconnect.

Professional Cloud Network Engineer Exam - Question 53

Discussion