Google ACE Planning and Configuring a Cloud Solution Practice Question
A company wants to set up a hybrid network between their on-premises data center and Google Cloud. They need a highly available VPN connection with 99.99% SLA. Which VPN solution should they choose?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
HA VPN
HA VPN offers a 99.99% SLA (with certain conditions) when configured with two interfaces and two tunnels to two on-premises VPN gateways. Classic VPN does not provide an SLA.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Classic VPN
Why it's wrong here
Classic VPN creates a single-IP tunnel with no built-in redundancy, so a single gateway failure or maintenance event takes the connection down. Google explicitly does not offer an SLA for Classic VPN, making it unsuitable for workloads that require high availability between on-premises and Google Cloud.
- ✓
HA VPN
Why this is correct
HA VPN uses two external IP addresses and two tunnels to the same on-premises peer, and when paired with two on-premises VPN gateways, it achieves a 99.99% SLA. It relies on BGP to automatically fail over if one tunnel or gateway becomes unavailable, providing true high availability and making it the correct choice here.
- ✗
Cloud Interconnect
Why it's wrong here
Cloud Interconnect provides dedicated physical connectivity via a colocation facility or partner, offering higher bandwidth and lower latency than VPN. However, it is not a VPN solution; it requires physical cross-connects and longer provisioning time, so it does not meet the stated requirement of a VPN-based hybrid network.
- ✗
Cloud NAT
Why it's wrong here
Cloud NAT is a managed network address translation service that enables private Compute Engine instances to make outbound internet connections. It does not establish any bidirectional tunnel or site-to-site connectivity between on-premises and Google Cloud, so it is entirely unsuitable for this hybrid networking use case.
Go deeper
Related to this question
Learn chapter
Google Cloud Platform Overview
Key term
Google Cloud
Google Cloud is a suite of cloud computing services offered by Google that provides infrastructure, platform, and software solutions over the internet.
Key term
VPN
A VPN (Virtual Private Network) creates a secure, encrypted tunnel between your device and a remote server, protecting your data and hiding your online activity.
About these practice questions
One of 769 original ACE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ACE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ACE exam.