Google Professional Cloud Network Engineer Question 149
Single answerGoogle Cloud PlatformYour organization needs to securely access Google APIs from an on-premises location without exposing traffic to the public internet. You are tasked with configuring this setup using Google Cloud. Which solution would you implement to meet this requirement?
- A
Set up Private Service Connect for Google APIs and configure a private endpoint to route API traffic.
- B
Configure a VPN tunnel to Google Cloud and use public IPs for API access.
- C
Use Cloud NAT to enable on-premises systems to access Google APIs via their private IPs.
- D
Set up Direct Peering with Google and enable access to Google APIs through the public internet.
Show answer and explanation
Correct answer: A
Explanation
Private Service Connect for Google APIs is the appropriate solution for accessing Google APIs privately from on-premises locations. By setting up private endpoints, you ensure that API traffic remains secure and avoids exposure to the public internet. Other options like using public IPs, Cloud NAT, or Direct Peering do not meet the requirement of private access to Google APIs.
- A. Correct.
This is the correct solution. Private Service Connect for Google APIs allows you to create private endpoints that route API traffic securely from on-premises systems to Google Cloud services without exposing it to the public internet.
- B. Incorrect.
This is incorrect because using public IPs for API access does not meet the requirement of avoiding exposure to the public internet. While a VPN tunnel secures the connection, the traffic to Google APIs would still be routed publicly.
- C. Incorrect.
This is incorrect because Cloud NAT is used to provide internet access to resources within Google Cloud that do not have external IPs. It does not facilitate private access to Google APIs from on-premises locations.
- D. Incorrect.
This is incorrect because Direct Peering allows private network connectivity to Google but does not provide private access to Google APIs. Traffic to Google APIs would still traverse the public internet.