Exam Professional Cloud Network Engineer topic 1 question 87 discussion

100% sure for D. https://cloud.google.com/network-connectivity/docs/vpn/concepts/overview HA VPN requirements Your Cloud VPN configuration must meet the following requirements to achieve a service-level availability of 99.99% for HA VPN: To achieve high availability when both VPN gateways are located in VPC networks, you must use two HA VPN gateways, and both of them must be located in the same region.

To achieve 99,99 you need it in two regions, hence I vote for A

A is the correct answer bcoz, "You have applications running in the us-west1 and us-east1 regions. You want to build a highly available VPN that provides 99.99% availability to connect your applications from your project to the cloud services provided by your partner's project" The question stating that you needs to enable connectivity between 2 regions us-west1 and us-east1; which A suffies it. While D is only mentioning to enable connecitivity between single region. Correct Anwer : A

should be VPC peering ;)

D is correct. Option D suggests creating one Cloud Router and one HA VPN gateway in each region of the VPC and the partner's VPC, and connecting the VPN gateways to the partner's gateways with a pair of tunnels. This solution provides redundancy and high availability with minimal infrastructure requirements. A is incorrect because it suggests creating one Cloud Router and one HA VPN gateway in each region of the VPC and the partner's VPC, which would require more infrastructure and would not necessarily simplify the solution. B is incorrect because it suggests using OpenVPN Access Servers, which would require additional infrastructure and may not necessarily simplify the solution. C is incorrect because it suggests creating OpenVPN Access Servers in each region of the VPC and the partner's VPC, which would require more infrastructure and may not necessarily provide the necessary redundancy and high availability for the VPN.

A is the answer. You need HA VPN in each region. D is talking about only one region.

• D. Create one Cloud Router and one HA VPN gateway in the us-west1 ***** region of your VPC and your partner's VPC. Connect your VPN gateways to the partner's gateways with a pair ***** of tunnels. Enable global dynamic routing in each VPC.

D is the most correct. Anyway, this is not able to have 99,99%: To achieve high availability when both VPN gateways are located in VPC networks, you must use two HA VPN gateways, and both of them must be located in the same region. And D is only talking about 1 HA VPN. info: https://cloud.google.com/network-connectivity/docs/vpn/concepts/overview#ha-requirements

D. Create one Cloud Router and one HA VPN gateway in the us-west1 region of your VPC and your partner's VPC. Connect your VPN gateways to the partner's gateways with a pair of tunnels. Enable global dynamic routing in each VPC https://cloud.google.com/static/network-connectivity/docs/vpn/images/ha-vpn-gcp-to-on-prem-2-a.svg https://cloud.google.com/network-connectivity/docs/vpn/concepts/topologies