A logistics firm pushes multi-terabyte nightly backups from its warehouse servers to Google Cloud and needs a private, high-throughput path that never touches the public internet. Which option fits?
Show answer and explanation
Answer: C
Cloud Interconnect gives a private, dedicated route from the warehouse to the cloud, so backup traffic never crosses the public internet. Its capacity is far higher and more predictable than an internet-based tunnel, which suits large nightly transfers. Cloud NAT only provides outbound internet access for instances without external IPs. Private Google Access reaches Google APIs from internal addresses but does not link the warehouse to the cloud. HA VPN is encrypted, yet its tunnels run over the public internet, so it misses the private, high-throughput requirement.
Why the other options are wrong
- A. Cloud NAT lets VMs without external IP addresses reach the internet for outbound connections. It does not create a path from the warehouse servers into Google Cloud.
- B. Private Google Access lets instances with only internal addresses reach Google APIs and services. It does not provide a link from the on-premises network to the cloud.
- D. HA VPN is a highly available IPsec service, but its tunnels cross the public internet. That conflicts with the requirement for a private, high-throughput path.
Exam tip. When a question demands a private, high-bandwidth path that avoids the internet, think Interconnect, and reserve VPN for encrypted, lower-capacity needs.