Google Professional Cloud Network Engineer Question 147
Single answerGoogle Cloud PlatformYour company wants to securely access Google APIs and services (e.g., Cloud Storage, BigQuery) from its on-premises data center over a private network. The company has established a Cloud VPN connection between the on-premises location and a Google Cloud VPC. Which solution should you implement to meet this requirement?
- A
Create a Private Service Connect endpoint in the VPC and configure it to access Google APIs.
- B
Configure Cloud NAT in the VPC to provide outbound internet access for Google APIs.
- C
Enable the Private Google Access option on the subnet used by the Cloud VPN tunnel.
- D
Establish a dedicated Interconnect to directly access Google APIs over private IPs.
Show answer and explanation
Correct answer: A
Explanation
To securely access Google APIs and services from an on-premises location over a private network, you need to use Private Service Connect for Google APIs. This allows traffic to remain within Google's private network, ensuring security and performance. Cloud NAT and Private Google Access are not applicable in this scenario, as they focus on different use cases. A dedicated Interconnect is not required, as the Cloud VPN connection is sufficient for this purpose.
- A. Correct.
Correct: Private Service Connect for Google APIs allows you to securely access Google APIs and services over private network connections, such as Cloud VPN or Interconnect, without routing traffic over the public internet.
- B. Incorrect.
Incorrect: Cloud NAT is used to provide outbound internet access for resources without external IP addresses but does not support private access to Google APIs.
- C. Incorrect.
Incorrect: Enabling Private Google Access allows VMs in a subnet to access Google APIs via private IPs, but it only works for GCP resources inside the VPC. It does not apply to on-premises systems connected via Cloud VPN.
- D. Incorrect.
Incorrect: A dedicated Interconnect provides high-bandwidth, low-latency private connectivity to Google Cloud resources, but it is not required for accessing Google APIs privately. Private Service Connect is the appropriate solution here.