Google Associate Cloud EngineerDeploying and implementing a cloud solutionHard
A financial institution needs to deploy a highly secure and compliant application on Google Cloud. The application requires dedicated network connectivity between its Compute Engine instances and on-premises data centers, ensuring low latency and high bandwidth, without traversing the public internet. Which Google Cloud networking product should be used?
- ACloud VPN
- BDirect Peering
- CCloud Interconnect (Dedicated)
- DCloud NAT
Show answer & explanationAnswer & explanation
Correct answer: C. Cloud Interconnect (Dedicated)
Cloud Interconnect (Dedicated) provides a direct physical connection between your on-premises network and Google's network, offering high bandwidth, low latency, and bypassing the public internet, which is crucial for highly secure and compliant applications.
Why the other options are wrong
- A. Cloud VPN uses encrypted tunnels over the public internet, which does not meet the 'without traversing the public internet' requirement and may not offer the 'high bandwidth' typically needed for critical financial applications.
- B. Direct Peering is for direct connection between your network and Google's network at a peering point, primarily for exchanging high-traffic public IP routes, not for private, direct connectivity to a specific VPC without traversing the public internet for your application traffic. It's different from Cloud Interconnect's private IP connectivity.
- D. Cloud NAT is for outbound internet access from private instances, not for dedicated connectivity to on-premises data centers.
Cloud Interconnect (Dedicated)
Provides a direct physical connection between your on-premises network and Google's network, offering private connectivity.
- Bypasses the public internet for enhanced security and compliance.
- Offers high bandwidth and low latency.
- Requires a physical cross-connect at a Google peering location.
Memory trick: Interconnect for direct, VPN for secure tunnel, Peering for public routes.