nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #234

You are creating a design that will connect your single on-premises data center to a VPC in Google Cloud by using an IPsec VPN connection. The connection must have a minimum SLA of 99.99%. There is…

The correct answer is D. 1. Create one HA VPN gateway. To achieve a minimum SLA of 99.99% for a VPN connection with a single on-premises VPN device and a single public IP address, the most appropriate solution is to use Google Cloud's HA VPN. HA VPN provides high availability and redundancy even when using a single public IP…

Submitted by anjalisingh· Apr 18, 2026Designing, planning, and prototyping a Google Cloud network

Question

You are creating a design that will connect your single on-premises data center to a VPC in Google Cloud by using an IPsec VPN connection. The connection must have a minimum SLA of 99.99%. There is a single VPN termination device located in your on-premises data center. The VPN termination device can be configured only with a single public IP address. Your design must also have the least amount of setup effort. What should you do?

Options

  • A
    1. Create two HA VPN gateways.
  • B
    1. Create one Classic VPN gateway and one HA VPN gateway.
  • C
    1. Replace the existing on-premises VPN termination device with a new device that is configured
  • D
    1. Create one HA VPN gateway.

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    10% (4)
  • C
    17% (7)
  • D
    71% (30)

Explanation

To achieve a minimum SLA of 99.99% for a VPN connection with a single on-premises VPN device and a single public IP address, the most appropriate solution is to use Google Cloud's HA VPN. HA VPN provides high availability and redundancy even when using a single public IP address on the on-premises VPN termination device. - An HA VPN gateway in Google Cloud has two interfaces (interface 0 and interface 1), each capable of creating a tunnel. - You can create two tunnels-one on each interface of the HA VPN gateway. Single public IP on the on-premises device: - Even with a single public IP address on the on-premises VPN device, you can terminate both tunnels on the same IP. HA VPN supports this configuration, and it ensures redundancy by leveraging two tunnels for failover. - HA VPN achieves 99.99% availability by using two independent tunnels for redundancy. If one tunnel fails, traffic seamlessly fails over to the other tunnel, maintaining availability. Least setup effort: - This approach does not require replacing the existing on-premises VPN device or configuring additional public IP addresses. It leverages the existing infrastructure with minimal configuration

Topics

#HA VPN#IPsec VPN#Hybrid Connectivity#SLA

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice