Objective 4.2
PCNEConfiguring a site-to-site IPSec VPN
Objective 4.2 sits in Configuring and implementing hybrid and multicloud network interconnectivity, which carries 16% of the Cloud Network Engineer exam. The questions below are original, written from the official objective title above, and each explanation cites the Google Cloud page it rests on.
Objective title verbatim from the official objectives. Google Cloud exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A team wants to build tunnels on an HA VPN gateway using static routes, to keep the on-premises configuration simple. What do those tunnels actually require?
Correct.
Concept
Some connection types build route exchange into the failover mechanism itself, so a hand-maintained route table is not an option the design offers.
Why A
VPN tunnels connected to HA VPN gateways must use dynamic routing, which means BGP on every tunnel.
Source
HA VPN topologies, checked August 2026If an entire virtual VPN device fails, Cloud VPN automatically instantiates a new one with the same configuration. The new gateway and tunnel connect automatically. VPN tunnels connected to HA VPN gateways must use dynamic (BGP) routing. Depending on the way that you configure route priorities for HA VPN tunnels, you can create an active-active or active-passive routing configuration.
Now you: objective 4.2 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
A team terminates an HA VPN gateway on a single Compute Engine VM acting as the peer. What sets the availability commitment for that connection?
Sample question 2 of 3
A peer gateway has two interfaces, and an engineer plans four tunnels so that every HA VPN interface reaches both peer interfaces. What does the 99.99% commitment actually need?
Sample question 3 of 3
A team wants both HA VPN tunnels carrying traffic at once rather than leaving one on standby. How does the peer gateway signal that intent?
Full Cloud Network Engineer question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.