Google Cloud Professional Cloud Security Engineer — Question 183

You work for a large organization that recently implemented a 100GB Cloud Interconnect connection between your Google Cloud and your on-premises edge router. While routinely checking the connectivity, you noticed that the connection is operational but there is an error message that indicates MACsec is operationally down. You need to resolve this error. What should you do?

Answer options

• A. Ensure that the Cloud Interconnect connection supports MACsec.
• B. Ensure that the on-premises router is not down.
• C. Ensure that the active pre-shared key created for MACsec is not expired on both the on-premises and Google edge routers.
• D. Ensure that the active pre-shared key matches on both the on-premises and Google edge routers.

Correct answer: D

Explanation

The correct answer is D because for MACsec to function properly, the pre-shared keys must match on both ends of the connection. Options A and B do not address the specific MACsec error, and while option C is relevant, it does not ensure that the keys are consistent, which is crucial for establishing a secure connection.