Get Your CertGoogle Cloud Associate Cloud EngineerPlayCompete
‹ All Google Cloud Associate Cloud Engineer questions

GCP Associate Cloud Engineer Practice Question 30: HA VPN 99 99 SLA

Google Cloud Associate Cloud Engineer · Test 3 · question 10 of 10

Hybrid Connectivityhard

You must connect an on-premises data center to a VPC network with encrypted traffic. The connection must have a 99.99 percent availability SLA, use the public internet, and be deployed within days, so ordering a physical circuit from a provider is not an option.

What should you deploy?

Select one answer
Show answer and explanation

Answer:

  • D. An HA VPN gateway with two tunnels connected to redundant interfaces of the peer gateway, plus a Cloud Router

HA VPN provides a 99.99 percent SLA when it is configured with two interfaces and tunnels to a peer gateway with redundancy (for example, two interfaces on the peer device, or two peer devices), with dynamic routing through Cloud Router. It encrypts traffic with IPsec, runs over the internet, and needs no physical provisioning.

Option A, a Classic VPN with one tunnel, offers a lower SLA (99.9 percent) and has a single point of failure. Options B and C are Interconnect products that need physical circuits or a provider, which contradicts the timeline, and they are not encrypted by default. A single Partner Interconnect VLAN would also not meet the 99.99 percent SLA.

Reference: Cloud VPN overview

Practice Test 3 ›

Study guides for Google Cloud Associate Cloud Engineer

Google Cloud Digital Leader exam: what's on it, who it's forGoogle Cloud Digital Leader: August 2026 exam update, six sections, US$99 price as of November 2026, renewal, study plan and ACE comparison.
Free cloud certifications in 2026: which are really freeWhich free cloud certifications are really free in 2026: Oracle's free OCI exams, and the voucher routes for AWS, Microsoft and Google, with prices.
Which cloud certification is best? AWS vs Azure vs GoogleWhich cloud certification is best for a beginner? AWS Cloud Practitioner, AZ-900 and Google Cloud Digital Leader compared: cost, format and which first.
Google Cloud certification path: is ACE worth it?Is Google's Associate Cloud Engineer certification worth it? The Google Cloud certification path in 2026, with cost, format and which exam to take first.
GCP IAM roles, service accounts and keyless accessBasic, predefined and custom roles in Google Cloud IAM, how grants inherit down the hierarchy, and how to use service accounts without keys.