You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network. How should you deploy the VPN?

The correct answer is D. Deploy Cloud VPN Gateway in each region. Cloud VPN gateways and tunnels are regional objects. https://cloud.google.com/network-connectivity/docs/vpn/how-to/creating-static- vpns#creating_a_gateway_and_tunnel

Submitted by femi9· Mar 30, 2026Designing and planning a cloud solution architecture

Question

You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network. How should you deploy the VPN?

Options

AUse VPC Network Peering between the VPC and the on-premises network.
BExpose the VPC to the on-premises network using IAM and VPC Sharing.
CCreate a global Cloud VPN Gateway with VPN tunnels from each region to the on-premises peer
DDeploy Cloud VPN Gateway in each region.

How the community answered

(35 responses)

A
6% (2)
B
6% (2)
C
17% (6)
D
71% (25)

Explanation

Cloud VPN gateways and tunnels are regional objects. https://cloud.google.com/network-connectivity/docs/vpn/how-to/creating-static- vpns#creating_a_gateway_and_tunnel

Topics

#Cloud VPN#multi-region VPC#VPN gateway#hybrid connectivity

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice