A clinic wants the 99.99 percent HA VPN topology Google documents to a VPC in one region. They have one HA VPN gateway and a tunnel on only one of its two interfaces. What completes that topology?
Select an answer to reveal the explanation.
Short Explanation
The second socket on the gateway you already have is the one that is empty. You add a tunnel on the other HA VPN interface and run BGP to Cloud Router on both. Another region is a different project, and a single Classic tunnel is not the 99.99 percent topology.
Full Explanation
Google's 99.99 percent HA VPN topology, for a gateway connected to the peer, needs a tunnel on each of the two interfaces and dynamic routing through Cloud Router. This clinic has the gateway and only one interface in use. The missing piece is the tunnel on the second interface, with BGP on both. A second HA VPN gateway in another region is a multi-region design. It is not what completes the two-interface topology on the gateway they already built. Classic VPN with a static route is a different gateway type and a lower documented target. OSPF is not how Cloud Router peers with HA VPN. Exam caveat: the 99.99 percent figure is Google's documented target for that redundant topology. One tunnel, however stable, leaves an interface unused. Operational check: both HA VPN interfaces should show a tunnel, and Cloud Router should show a BGP session for each.