Cloud Interconnect for dedicated connections in GCP - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ Architecture

intermediate

Choosing the right Cloud Interconnect type for high availability

You want to connect your on-premises data center to Google Cloud with the highest availability. Which Cloud Interconnect setup should you choose?

A Use a VPN connection over the internet for backup only.

B Use two Dedicated Interconnect connections in different locations with VLAN attachments.

C Use a single Partner Interconnect connection with multiple VLAN attachments.

D Use a single Dedicated Interconnect connection with one VLAN attachment.

💡 Hint

Think about avoiding a single point of failure by using multiple physical connections.

Using two Dedicated Interconnect connections in different locations with VLAN attachments provides redundancy and high availability. A single connection or Partner Interconnect does not guarantee the same level of availability. VPN over internet is less reliable and usually used as backup.

❓ service_behavior

intermediate

Bandwidth capacity of a single Dedicated Interconnect link

What is the maximum bandwidth capacity of a single Google Cloud Dedicated Interconnect link?

A 100 Gbps

B 10 Gbps

C 1 Gbps

D 40 Gbps

💡 Hint

Consider the standard capacity for a single physical connection in Dedicated Interconnect.

A single Dedicated Interconnect link provides up to 100 Gbps bandwidth. To achieve higher bandwidth, multiple links can be aggregated.

❓ security

advanced

Securing data over Dedicated Interconnect

Which statement best describes the security of data transmitted over Google Cloud Dedicated Interconnect?

A Data is encrypted by default over Dedicated Interconnect.

B Google Cloud automatically applies TLS encryption on Dedicated Interconnect traffic.

C Data is not encrypted by default; encryption must be handled by the customer.

D Dedicated Interconnect uses IPsec tunnels to encrypt data.

💡 Hint

Think about the physical nature of Dedicated Interconnect and what Google Cloud provides by default.

Dedicated Interconnect provides a private physical connection but does not encrypt data by default. Customers must implement their own encryption if needed. TLS or IPsec are not applied automatically on this connection.

🧠 Conceptual

advanced

Understanding VLAN attachments in Dedicated Interconnect

What is the purpose of a VLAN attachment in a Google Cloud Dedicated Interconnect setup?

A It creates a logical connection to a Virtual Private Cloud (VPC) network over the physical interconnect.

B It encrypts the data passing through the Dedicated Interconnect.

C It monitors traffic for security threats on the interconnect.

D It provides internet access through the Dedicated Interconnect.

💡 Hint

Think about how physical connections are divided logically to connect to cloud networks.

A VLAN attachment is a logical interface that connects the physical Dedicated Interconnect to a specific VPC network, enabling private communication. It does not encrypt or monitor traffic, nor provide internet access.

✅ Best Practice

expert

Optimizing failover for Dedicated Interconnect connections

You have two Dedicated Interconnect connections in different locations for redundancy. What is the best practice to ensure automatic failover between them?

A Manually switch traffic to the backup connection when the primary fails.

B Disable one connection and enable it only when the other fails.

C Use static routes with equal priority on both connections.

D Configure BGP sessions on both connections with different priorities and use dynamic routing.

💡 Hint

Consider how routing protocols help manage multiple paths automatically.

Using BGP with different priorities allows automatic failover and traffic rerouting without manual intervention. Static routes or manual switching do not provide seamless failover. Disabling connections reduces availability.

Practice

1. What is the main purpose of Cloud Interconnect in Google Cloud?

easy

A. To provide a private and fast connection between your on-premises network and Google Cloud

B. To host virtual machines in Google Cloud

C. To store data in Google Cloud Storage

D. To manage user permissions in Google Cloud

Solution

1. Step 1: Understand Cloud Interconnect's role

   Cloud Interconnect is designed to create private network connections between your physical data center and Google Cloud.

2. Step 2: Identify the correct purpose

   Among the options, only private and fast connection matches Cloud Interconnect's function.

3. Final Answer:

   To provide a private and fast connection between your on-premises network and Google Cloud -> Option A

4. Quick Check:

   Cloud Interconnect = Private fast connection [OK]

Hint: Cloud Interconnect connects your network privately to Google Cloud [OK]

Common Mistakes:

• Confusing Cloud Interconnect with storage or VM services
• Thinking it manages user permissions
• Assuming it hosts virtual machines

2. Which of the following is the correct order to set up a Dedicated Cloud Interconnect connection?

easy

A. Create a Cloud Router, then an Interconnect, then an Interconnect Attachment

B. Create an Interconnect, then a Cloud Router, then an Interconnect Attachment

C. Create an Interconnect Attachment, then a Cloud Router, then an Interconnect

D. Create a Cloud Router, then an Interconnect Attachment, then an Interconnect

Solution

1. Step 1: Recall the setup sequence

   First, you create the physical Interconnect, then the Cloud Router to manage routes, and finally attach them with an Interconnect Attachment.

2. Step 2: Match the correct order

   Create an Interconnect, then a Cloud Router, then an Interconnect Attachment correctly lists: Interconnect, Cloud Router, Interconnect Attachment.

3. Final Answer:

   Create an Interconnect, then a Cloud Router, then an Interconnect Attachment -> Option B

4. Quick Check:

   Setup order = Interconnect, Router, Attachment [OK]

Hint: Remember: Interconnect first, then Router, then Attachment [OK]

Common Mistakes:

• Mixing up the order of creating components
• Creating Attachment before Interconnect
• Skipping Cloud Router creation

3. Given the following setup code snippet for a Dedicated Interconnect, what will be the state of the Interconnect Attachment after creation?

interconnect = createInterconnect('my-interconnect')
cloudRouter = createCloudRouter('my-router')
attachment = createInterconnectAttachment(interconnect, cloudRouter)
print(attachment.state)

medium

A. ACTIVE

B. UNKNOWN

C. PENDING

D. FAILED

Solution

1. Step 1: Understand Interconnect Attachment lifecycle

   When an Interconnect Attachment is first created, it starts in a PENDING state until the physical connection is verified and established.

2. Step 2: Determine the initial state after creation

   Since the snippet just created the attachment, it will be in PENDING state before becoming ACTIVE.

3. Final Answer:

   PENDING -> Option C

4. Quick Check:

   New attachment state = PENDING [OK]

Hint: New attachments start as PENDING until connection is active [OK]

Common Mistakes:

• Assuming attachment is ACTIVE immediately
• Confusing FAILED with initial state
• Thinking UNKNOWN is default

4. You created a Dedicated Interconnect and an Interconnect Attachment, but the attachment state remains in PENDING for hours. What is the most likely cause?

medium

A. The physical connection is not yet provisioned by the provider

B. The Cloud Router is misconfigured with wrong BGP settings

C. The Interconnect Attachment was deleted accidentally

D. The Google Cloud project quota is exceeded

Solution

1. Step 1: Analyze the PENDING state meaning

   PENDING means the physical link is not yet active or provisioned by the provider.

2. Step 2: Identify the cause of delay

   If the attachment stays PENDING for hours, it usually means the provider has not completed the physical connection setup.

3. Final Answer:

   The physical connection is not yet provisioned by the provider -> Option A

4. Quick Check:

   PENDING long time = Physical link not ready [OK]

Hint: Long PENDING means physical link not ready from provider [OK]

Common Mistakes:

• Blaming Cloud Router misconfiguration immediately
• Assuming attachment was deleted
• Thinking quota issues cause PENDING state

5. You want to maximize bandwidth and redundancy using Dedicated Cloud Interconnect. Which setup should you choose?

hard

A. Create one Interconnect with multiple Interconnect Attachments in the same location

B. Use VPN tunnels instead of Dedicated Interconnect for redundancy

C. Create one Interconnect and one Cloud Router, then attach multiple VPC networks to it

D. Create two Interconnects in different locations, each with its own Cloud Router and Interconnect Attachment

Solution

1. Step 1: Understand bandwidth and redundancy needs

   To maximize bandwidth and have redundancy, you need multiple physical connections in different locations.

2. Step 2: Evaluate options for redundancy

   Create two Interconnects in different locations, each with its own Cloud Router and Interconnect Attachment creates two Interconnects in different locations, each with its own Cloud Router and Attachment, providing both bandwidth aggregation and failover.

3. Step 3: Rule out other options

   Create one Interconnect with multiple Interconnect Attachments in the same location lacks location diversity; Create one Interconnect and one Cloud Router, then attach multiple VPC networks to it does not increase physical bandwidth; Use VPN tunnels instead of Dedicated Interconnect for redundancy uses VPN, which is slower and not Dedicated Interconnect.

4. Final Answer:

   Create two Interconnects in different locations, each with its own Cloud Router and Interconnect Attachment -> Option D

5. Quick Check:

   Max bandwidth + redundancy = Multiple Interconnects different locations [OK]

Hint: Use multiple Interconnects in different locations for best redundancy [OK]

Common Mistakes:

• Using multiple attachments in one location only
• Relying on single Interconnect for redundancy
• Confusing VPN with Dedicated Interconnect