Google Associate Cloud Engineer Question 275
Select 3Google Cloud PlatformYour company has a web application hosted on a Google Cloud VM instance in a private subnet. Users from the internet need to access this application, and the VM instance needs to reach external services on the internet for updates. Which combination of Google Cloud services would you use to achieve this setup?
- A
A. Use Cloud NAT to allow the VM instances to reach external services on the internet.
- B
B. Use Cloud DNS to create a public DNS zone for the web application.
- C
C. Use a Global Load Balancer to expose the application to the internet.
- D
D. Use a VPN to allow internet traffic to the VM instance.
- E
E. Use Identity-Aware Proxy to manage user access to the web application.
Show answer and explanation
Correct answers: A, B, C
Explanation
To allow the VM instance in a private subnet to access external services and to expose the web application to users on the internet, you can use Cloud NAT to provide outbound internet access without external IPs on the VM, Cloud DNS to manage the application's DNS records, and a Global Load Balancer to handle incoming internet traffic and distribute it to the VM instance.
- A. Correct.
Cloud NAT allows VM instances in a private subnet to access the internet without needing external IP addresses.
- B. Correct.
Cloud DNS can be used to create a public DNS zone, making the web application accessible via a domain name.
- C. Correct.
A Global Load Balancer can be used to expose the application to the internet, providing a frontend IP address.
- D. Incorrect.
A VPN is typically used for secure communication between two networks, not for exposing applications to the internet.
- E. Incorrect.
Identity-Aware Proxy is used for protecting applications with user authentication, not for basic internet exposure.