nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #126

Your organization's security policy requires that all internet-bound traffic return to your on- premises data center through HA VPN tunnels before egressing to the internet, while allowing virtual…

The correct answer is C. Announce a 0.0.0.0/0 route from your on-premises router with a MED of 1000. If your VPC network contains a default route whose next hop is the default internet gateway, you can use that route to access Google APIs and services, without needing to create custom routes. If you have replaced an IPv4 default route (destination 0.0.0.0/0) with a custom…

Submitted by rohit_dlh· Apr 18, 2026Implementing a Google Cloud network

Question

Your organization's security policy requires that all internet-bound traffic return to your on- premises data center through HA VPN tunnels before egressing to the internet, while allowing virtual machines (VMs) to leverage private Google APIs using private virtual IP addresses 199.36.153.4/30. You need to configure the routes to enable these traffic flows. What should you do?

Options

  • AConfigure a custom route 0.0.0.0/0 with a priority of 500 whose next hop is the default internet
  • BConfigure a custom route 0.0.0.0/0 with a priority of 1000 whose next hop is the internet gateway.
  • CAnnounce a 0.0.0.0/0 route from your on-premises router with a MED of 1000.
  • DAnnounce a 0.0.0.0/0 route from your on-premises router with a MED of 500.

How the community answered

(35 responses)
  • A
    14% (5)
  • B
    3% (1)
  • C
    74% (26)
  • D
    9% (3)

Explanation

If your VPC network contains a default route whose next hop is the default internet gateway, you can use that route to access Google APIs and services, without needing to create custom routes. If you have replaced an IPv4 default route (destination 0.0.0.0/0) with a custom route whose next hop is not the default internet gateway, you can meet the routing requirements for Google APIs and services using custom routing instead. custom routing: As an alternative to a default route for IPv4 traffic, you can use custom static routes, each having a more specific destination, and each using the default internet gateway next https://cloud.google.com/vmware-engine/docs/networking/workload-internet-access#use_an_on- premises_connection_for_workload_internet_access

Topics

#VPC Routing#BGP#Cloud Router#On-premises Egress

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice