You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network. How should you deploy the VPN?
Choose an answer
Tap an option to check your answer.
Correct answer: Deploy Cloud VPN Gateway in each region. Ensure that each region has at least one VPN tunnel to the on-premises peer gateway..
Why this is the answer
The correct approach is to deploy a Cloud VPN Gateway in each region, with at least one VPN tunnel from each regional gateway to the on-premises peer gateway. This ensures high availability and regional isolation for the application across the two regions. If one region experiences an outage, the other region's VPN connection remains active. A global Cloud VPN Gateway doesn't exist in Google Cloud; VPN gateways are regional resources. VPC Network Peering is used for connecting two VPC networks within Google Cloud, not for connecting to an on-premises network. Exposing the VPC using IAM and VPC Sharing is for sharing subnets within Google Cloud projects and does not establish a VPN connection to an on-premises network.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed