An HA VPN deployment between your on‑prem appliance and Google Cloud has two tunnels and BGP configured on a Cloud Router. Both tunnels are UP. How will Google Cloud handle traffic egress to on‑prem?
Choose an answer
Tap an option to check your answer.
Correct answer: Traffic will be load-balanced across both tunnels (active-active) using ECMP/flow hashing..
Why this is the answer
When two HA VPN tunnels are configured and both are UP, Google Cloud uses Equal-Cost Multi-Path (ECMP) routing. This means traffic is load-balanced across both tunnels in an active-active configuration. ECMP distributes traffic based on flow hashing, ensuring efficient utilization of both tunnels and providing higher throughput. The option of only one tunnel being active is incorrect because HA VPN is designed for active-active operation when both tunnels are healthy. Duplicating packets is not a standard traffic handling mechanism for VPNs and would introduce unnecessary overhead. Disabling BGP on one tunnel would prevent it from being used, which contradicts the purpose of an HA VPN setup.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed