Ha Vpn Bandwidth Scaling Multi Gateway Design

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

An enterprise organization is scaling hybrid connectivity between its on-premises data center and a Google Cloud Virtual Private Cloud (VPC) network. The current throughput requirements exceed the capacity of a single High Availability (HA) VPN gateway (250,000 packets per second per tunnel). The network security team must design an expanded VPN architecture that meets the following criteria:

Increases aggregate bandwidth by utilizing multiple HA VPN gateways
Ensures automatic failover and maintains the 99.99% availability Service Level Agreement (SLA)
Avoids severe bandwidth throttling or asymmetric traffic degradation during a partial tunnel failure

Which architectural design should the team implement?

Deploy multiple HA VPN gateways configured in an active/active routing topology across all gateways, advertise identical prefixes with equal BGP MED values across all active tunnels, and match the corresponding gateway interfaces.

Deploy multiple HA VPN gateways configured with an active/passive tunnel pair on each gateway, advertising prefixes with lower BGP MED values on active tunnels and higher MED values on passive tunnels.

Deploy multiple HA VPN gateways and configure policy-based traffic selectors on each gateway matching specific /24 workload subnet ranges.

Deploy a single HA VPN gateway and augment bandwidth by adding route-based Classic VPN tunnels with custom static routes set to lower priority values.

Professional Cloud Security Engineer

Ha Vpn Bandwidth Scaling Multi Gateway Design

Related questions