Objective 2.1

PCA

Configuring network topologies

Objective 2.1 sits in Managing and provisioning a cloud solution infrastructure, which carries 17.5% of the Cloud Architect exam. The questions below are original, written from the official objective title above, and each explanation cites the Google Cloud page it rests on.

Objective title verbatim from the official objectives. Google Cloud exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-1Managing and provisioning a cloud solution infrastructure

A team configures an HA VPN gateway with only one active interface and a single external address to keep the build simple. What does that configuration give up?

The ability to run more than one tunnelEach interface still supports multiple tunnels in this shape.
Dynamic routing through a Cloud RouterRoute exchange is unaffected by how many interfaces exist.
IPsec encryption of the tunnel trafficThe tunnel is still an IPsec tunnel either way.
The availability SLA on the connectionCorrect · your answerCorrect. The commitment needs the redundant shape.

Correct.

Concept

An availability commitment is earned by the topology, not by the product name, so a supported product deployed in an unsupported shape carries no commitment at all.

Why D

HA VPN provides an SLA of 99.99% or 99.9% depending on topology and configuration, but a gateway configured with only one active interface and one external IP address has no availability SLA.

Source

You can configure an HA VPN gateway with only one active interface and one external IP address; however, this configuration does not provide an availability SLA.

Choosing a Network Connectivity product, checked August 2026
#gcp#cloud-vpn#sla#hybrid

Now you: objective 2.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-1Managing and provisioning a cloud solution infrastructure

An organization cannot install and maintain routing equipment in a colocation facility where it would meet the Google network. Which connectivity option does that constraint point to?

Sample question 2 of 3

2-1Managing and provisioning a cloud solution infrastructure

An architect links a VPC network to workloads in another cloud provider and wants the Cloud Interconnect SLA to apply. What does that oblige the team to purchase?

Sample question 3 of 3

2-1Managing and provisioning a cloud solution infrastructure

A team plans to reach Google services from on-premises hosts over Cloud Interconnect. Which one stays outside what that connection reaches?

Full Cloud Architect question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Managing and provisioning a cloud solution infrastructure