Ha Vpn Over Interconnect Tunnel Establishment | Professional Cloud Security Engineer | StudyCerts

Professional Cloud Security Engineer

Advanced

Prepare and test your skills

Track Readiness

Set Exam Goal

Advanced

Prepare and test your skills

Track Readiness

Set Exam Goal

Ha Vpn Over Interconnect Tunnel Establishment

Section: Designing and configuring private connectivity and encryption between data centers and VPC network (e.g., HA VPN, Cloud Interconnect).

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

An enterprise organization is deploying High Availability (HA) VPN over Cloud Interconnect to meet strict compliance mandates for data-in-transit encryption between its on-premises data center and a Google Cloud VPC network.

The underlying Dedicated Interconnect connection is fully operational, and the BGP session for the Interconnect Cloud Router is established. However, the HA VPN tunnels fail to establish (IKE negotiation fails), and the on-premises VPN device cannot reach or detect the Google Cloud HA VPN gateway endpoints.

Which action should the security engineer take to resolve this issue?

Configure custom advertised routes on the HA VPN Cloud Router to advertise the VPC subnet ranges directly to the Interconnect Cloud Router's BGP peer.

Set the VLAN attachment Maximum Transmission Unit (MTU) to 8896 bytes (jumbo frames) to prevent unfragmentable IKE negotiation packets from being dropped.

Enable MACsec encryption on the Dedicated Interconnect ports so the Cloud Router can redistribute HA VPN gateway interface routes across the Layer 2 physical links.

Verify that each VLAN attachment is configured with regional internal IPv4 addresses (--ipsec-internal-addresses) so that the Interconnect Cloud Router advertises the HA VPN gateway IP ranges.

Professional Cloud Security Engineer

Ha Vpn Over Interconnect Tunnel Establishment

Related questions