Google Cloud Professional Cloud Network Engineer — Question 139

You recently deployed two network virtual appliances in us-central1. Your network appliances provide connectivity to your on-premises network, 10.0.0.0/8. You need to configure the routing for your Virtual Private Cloud (VPC). Your design must meet the following requirements:

• All access to your on-premises network must go through the network virtual appliances.
• Allow on-premises access in the event of a single network virtual appliance failure.
• Both network virtual appliances must be used simultaneously.

Which method should you use to accomplish this?

Answer options

• A. Configure two routes for 10.0.0.0/8 with different priorities, each pointing to separate network virtual appliances.
• B. Configure an internal HTTP(S) load balancer with the two network virtual appliances as backends. Configure a route for 10.0.0.0/8 with the internal HTTP(S) load balancer as the next hop.
• C. Configure a network load balancer for the two network virtual appliances. Configure a route for 10.0.0.0/8 with the network load balancer as the next hop.
• D. Configure an internal TCP/UDP load balancer with the two network virtual appliances as backends. Configure a route for 10.0.0.0/8 with the internal load balancer as the next hop.

Correct answer: D

Explanation

The correct answer is D because an internal TCP/UDP load balancer can distribute traffic across both network virtual appliances, ensuring simultaneous use and providing redundancy in case one appliance fails. Options A and C do not ensure simultaneous use and failover. Option B, while using a load balancer, specifies an HTTP(S) load balancer which is not suitable for all types of traffic, making option D the most appropriate choice.