Google Cloud Professional Cloud Network Engineer — Question 189

You are deploying HA VPN within Google Cloud. You need to exchange routes dynamically between your on-premises gateway and Google Cloud. You have already created a HA VPN gateway and a peer VPN gateway resource. What should you do?

Answer options

• A. Create a Cloud Router, add VPN tunnels, and configure BGP sessions.
• B. Create a Cloud Router, add VPN tunnels, and configure static routes to your subnet ranges.
• C. Create a second HA VPN gateway, add VPN tunnels, and create firewall rules to allow BGP traffic to the Cloud Router.
• D. Create a second HA VPN gateway, add VPN tunnels, and enable global dynamic routing.

Correct answer: A

Explanation

The correct answer is A because creating a Cloud Router, adding VPN tunnels, and configuring BGP sessions is essential for dynamic route exchange in HA VPN setups. Options B and C involve static routing or unnecessary additional gateways that do not facilitate dynamic exchange. Option D suggests enabling global dynamic routing, which is not required for the route exchange process in this context.