Professional Cloud Security EngineerConfiguring network securityHard
A company is migrating its on-premises database servers to Google Cloud and requires a highly available, low-latency, and secure connection. The connection must support over 10 Gbps of throughput and be completely isolated from the public internet. They also need to ensure redundancy to avoid service disruption. Which Google Cloud networking solution should they implement?
- ACloud VPN with High Availability (HA VPN)
- BCloud VPN with Multiple Tunnels and Dynamic Routing
- CCloud Interconnect (Partner Interconnect) with 2x 10 Gbps connections through a single service provider
- DCloud Interconnect (Dedicated Interconnect) with 2x 10 Gbps connections in different metros
Show answer & explanationAnswer & explanation
Correct answer: D. Cloud Interconnect (Dedicated Interconnect) with 2x 10 Gbps connections in different metros
Dedicated Interconnect provides a direct, private physical connection with high bandwidth (10 Gbps or 100 Gbps) and low latency. Using two connections in different metros and different edge availability domains ensures high availability and redundancy, meeting the requirement for isolation from the public internet and high throughput.
Why the other options are wrong
- A. Cloud VPN operates over the public internet and offers lower throughput compared to Dedicated Interconnect, not suitable for >10 Gbps private connection.
- B. Cloud VPN, even with multiple tunnels, cannot achieve >10 Gbps throughput typically and still uses the public internet.
- C. Partner Interconnect can provide high bandwidth but relies on a service provider. While two connections add redundancy, placing them in different metros and edge availability domains with Dedicated Interconnect provides a higher level of isolation and control for a financial institution.
Dedicated Interconnect Redundancy
Dedicated Interconnect offers direct, private connections to Google Cloud. For redundancy, multiple connections across different physical paths, metros, and edge availability domains are recommended.
- Provides private, high-bandwidth (10/100 Gbps) connections.
- Requires physical presence at a Google-supported colocation facility.
- Redundancy achieved by multiple connections in different metros/edge domains.
Memory trick: Dedicated Interconnect: Direct, Data-intensive, Dependable.