nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #186

You are designing a new network infrastructure for your customer in Google Cloud. Your customer requires a connection between two Google Cloud VPCs that must include a VPN tunnel. You want to follow…

The correct answer is D. Border Gateway Protocol (BGP)-based VPN using HA VPN between the two Google Cloud VPCs. For maximum availability and Google-recommended practices when connecting two Google Cloud VPCs via a VPN tunnel, Border Gateway Protocol (BGP)-based routing with HA VPN should be chosen.

Submitted by miguelv· Apr 18, 2026Designing, planning, and prototyping a Google Cloud network

Question

You are designing a new network infrastructure for your customer in Google Cloud. Your customer requires a connection between two Google Cloud VPCs that must include a VPN tunnel. You want to follow Google-recommended practices while ensuring maximum availability of the connection. Which VPN configuration should you choose?

Options

  • APolicy-based VPN using Classic VPN between the two Google Cloud VPCs
  • BBorder Gateway Protocol (BGP)-based VPN using Classic VPN between the two Google Cloud
  • CRoute-based VPN using Classic VPN between the two Google Cloud VPCs
  • DBorder Gateway Protocol (BGP)-based VPN using HA VPN between the two Google Cloud VPCs

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    4% (1)
  • C
    4% (1)
  • D
    86% (24)

Why each option

For maximum availability and Google-recommended practices when connecting two Google Cloud VPCs via a VPN tunnel, Border Gateway Protocol (BGP)-based routing with HA VPN should be chosen.

APolicy-based VPN using Classic VPN between the two Google Cloud VPCs

Policy-based VPN using Classic VPN is a single-tunnel, non-HA solution that lacks automatic failover and does not meet the "maximum availability" requirement.

BBorder Gateway Protocol (BGP)-based VPN using Classic VPN between the two Google Cloud

BGP-based VPN using Classic VPN is not a native Google Cloud offering; Classic VPN primarily supports static (route-based or policy-based) routing, and by itself, a Classic VPN tunnel is not highly available.

CRoute-based VPN using Classic VPN between the two Google Cloud VPCs

Route-based VPN using Classic VPN is a single-tunnel, non-HA solution that relies on static routes and does not provide automatic failover, thus failing to meet the "maximum availability" requirement.

DBorder Gateway Protocol (BGP)-based VPN using HA VPN between the two Google Cloud VPCsCorrect

HA VPN is Google Cloud's highly available VPN solution, offering 99.99% uptime with dual tunnels and interfaces, and it inherently uses BGP (Border Gateway Protocol) for dynamic routing to ensure automatic failover and maximum availability between the two Google Cloud VPCs.

Concept tested: HA VPN for maximum availability between VPCs

Source: https://cloud.google.com/network-connectivity/docs/vpn/how-to/creating-ha-vpn

Topics

#HA VPN#BGP#VPN Configuration#Network Availability

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice