You are configuring an HA VPN to an on-premises network. The on-premises VPN device supports BGP but only one BGP session per tunnel. You have created the HA VPN gateway and two tunnels to the same peer IP. You have configured a Cloud Router with two BGP sessions, one for each tunnel. You notice that only one BGP session is established. What is the most likely cause?

The Cloud Router is using the same ASN for both BGP sessions.

The BGP IP addresses for the two sessions are overlapping.

The shared secrets for the two tunnels are different.

The on-premises device is configured to accept only one BGP session from the same peer IP.

Which command or tool can you use to verify the status of a VPN tunnel in Google Cloud?

gcloud compute firewall-rules list

gcloud compute vpn-tunnels describe

Which routing method is required when using HA VPN to connect two Google Cloud VPCs?

Static routing with custom route advertisements

Policy-based routing with traffic selectors

Default routing with automatic route generation

What is the defining characteristic of a policy-based Classic VPN?

It encrypts traffic based on traffic selectors that define which source/destination pairs are allowed.

It supports multiple tunnels for redundancy.

It uses BGP to exchange routes.

It requires a Cloud Router for configuration.

Google CloudProfessional Cloud Network Engineer

Domain 4Objective 2

4.2 Configuring a Site-To-Site IPSec VPN. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 3)

Part of the Section 4: Configuring and implementing hybrid and multicloud network interconnectivity (~16% of the exam) domain, which accounts for ~16% of the PROFESSIONAL-CLOUD-NETWORK-ENGINEER exam.

16questions here

4free pages

8concepts

~16%of the exam

Questions 11–15

11expert · medium
You are configuring an HA VPN to an on-premises network. The on-premises VPN device supports BGP but only one BGP session per tunnel. You have created the HA VPN gateway and two tunnels to the same peer IP. You have configured a Cloud Router with two BGP sessions, one for each tunnel. You notice that only one BGP session is established. What is the most likely cause?
Select an answer first
12foundation · easy
Which command or tool can you use to verify the status of a VPN tunnel in Google Cloud?
Select an answer first
13foundation · easy
Which routing method is required when using HA VPN to connect two Google Cloud VPCs?
Select an answer first
14foundation · easy
When configuring an HA VPN tunnel in Google Cloud, which resource must be created to define the on-premises VPN device's public IP address?
Select an answer first
15foundation · easy
What is the defining characteristic of a policy-based Classic VPN?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-NETWORK-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-NETWORK-ENGINEER” is a trademark of its owner, used for identification only.

4.2 Configuring a Site-To-Site IPSec VPN. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 3)

Questions 11–15

Which command or tool can you use to verify the status of a VPN tunnel in Google Cloud?

Which routing method is required when using HA VPN to connect two Google Cloud VPCs?

When configuring an HA VPN tunnel in Google Cloud, which resource must be created to define the on-premises VPN device's public IP address?

What is the defining characteristic of a policy-based Classic VPN?

Keep studying — Section 4: Configuring and implementing hybrid and multicloud network interconnectivity (~16% of the exam)