PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #126
Your organization's security policy requires that all internet-bound traffic return to your on- premises data center through HA VPN tunnels before egressing to the internet, while allowing virtual…
The correct answer is C. Announce a 0.0.0.0/0 route from your on-premises router with a MED of 1000. If your VPC network contains a default route whose next hop is the default internet gateway, you can use that route to access Google APIs and services, without needing to create custom routes. If you have replaced an IPv4 default route (destination 0.0.0.0/0) with a custom…
Question
Options
- AConfigure a custom route 0.0.0.0/0 with a priority of 500 whose next hop is the default internet
- BConfigure a custom route 0.0.0.0/0 with a priority of 1000 whose next hop is the internet gateway.
- CAnnounce a 0.0.0.0/0 route from your on-premises router with a MED of 1000.
- DAnnounce a 0.0.0.0/0 route from your on-premises router with a MED of 500.
How the community answered
(35 responses)- A14% (5)
- B3% (1)
- C74% (26)
- D9% (3)
Explanation
If your VPC network contains a default route whose next hop is the default internet gateway, you can use that route to access Google APIs and services, without needing to create custom routes. If you have replaced an IPv4 default route (destination 0.0.0.0/0) with a custom route whose next hop is not the default internet gateway, you can meet the routing requirements for Google APIs and services using custom routing instead. custom routing: As an alternative to a default route for IPv4 traffic, you can use custom static routes, each having a more specific destination, and each using the default internet gateway next https://cloud.google.com/vmware-engine/docs/networking/workload-internet-access#use_an_on- premises_connection_for_workload_internet_access
Topics
Community Discussion
No community discussion yet for this question.