Google Professional Cloud Network Engineer

Google Professional Cloud Network Engineer

Get started today

Ultimate access to all questions.


You are setting up a connection between your organization's Google Cloud environment and your on-premises network, which does not support BGP. Your on-premises network has 30 CIDR ranges that need to be accessible from Google Cloud. The VPN gateway generates a unique child security association (SA) for each CIDR. To ensure all 30 on-premises CIDR ranges are reachable from Google Cloud while following Google's best practices, which two approaches should you use? (Select two.)