nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #154

Your organization has a Google Cloud Virtual Private Cloud (VPC) with subnets in us-east1, us- west4, and europe-west4 that use the default VPC configuration. Employees in a branch office in Europe…

The correct answer is C. Configure the VPC dynamic routing mode to Global. To allow a Cloud Router in europe-west4 to advertise routes for subnets across all regions of a Google Cloud VPC to a branch office, the VPC's dynamic routing mode must be configured to Global.

Submitted by mike_84· Apr 18, 2026Configuring network services

Question

Your organization has a Google Cloud Virtual Private Cloud (VPC) with subnets in us-east1, us- west4, and europe-west4 that use the default VPC configuration. Employees in a branch office in Europe need to access the resources in the VPC using HA VPN. You configured the HA VPN associated with the Google Cloud VPC for your organization with a Cloud Router deployed in europe-west4. You need to ensure that the users in the branch office can quickly and easily access all resources in the VPC. What should you do?

Options

  • ACreate custom advertised routes for each subnet.
  • BConfigure each subnet's VPN connections to use Cloud VPN to connect to the branch office.
  • CConfigure the VPC dynamic routing mode to Global.
  • DSet the advertised routes to Global for the Cloud Router.

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    76% (16)
  • D
    14% (3)

Why each option

To allow a Cloud Router in europe-west4 to advertise routes for subnets across all regions of a Google Cloud VPC to a branch office, the VPC's dynamic routing mode must be configured to Global.

ACreate custom advertised routes for each subnet.

While custom advertised routes can be configured, changing the VPC's dynamic routing mode to Global is a more comprehensive and efficient way to ensure all subnets are advertised without manually creating custom routes for each, especially when the VPC has a default configuration.

BConfigure each subnet's VPN connections to use Cloud VPN to connect to the branch office.

VPN connections are configured per VPN gateway and tunnel, not per subnet; this option misinterprets the role of VPN connectivity in relation to subnets.

CConfigure the VPC dynamic routing mode to Global.Correct

By default, a Cloud Router in a VPC network with `Regional` dynamic routing mode only advertises routes to subnets in its own region; changing the VPC dynamic routing mode to `Global` allows the Cloud Router in `europe-west4` to advertise routes for all subnets across all regions (`us-east1`, `us-west4`, and `europe-west4`) to the on-premises branch office via HA VPN, ensuring full connectivity.

DSet the advertised routes to Global for the Cloud Router.

The `advertised routes` setting on a Cloud Router configures what specific routes are advertised, but the Cloud Router's ability to even *see* routes from other regions is controlled by the VPC network's overall dynamic routing mode. Setting advertised routes to Global wouldn't work if the VPC dynamic routing mode is still Regional.

Concept tested: VPC dynamic routing mode (Global vs. Regional)

Source: https://cloud.google.com/network-connectivity/docs/router/concepts/dynamic-routing#modes

Topics

#VPC Dynamic Routing#HA VPN#Cloud Router#Multi-region connectivity

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice