Google Professional Cloud Network Engineer Question 150
Select 4Google Cloud PlatformYour organization has an on-premises data center that needs to securely connect to Google APIs (such as BigQuery and Cloud Storage) without using public IPs. You have decided to use Private Service Connect for Google APIs. Which of the following steps are required to achieve this setup?
- A
Create a Private Service Connect endpoint in your VPC network.
- B
Reserve a public IP address in your VPC to route traffic to Google APIs.
- C
Configure DNS forwarding on your on-premises environment to resolve private.googleapis.com to the Private Service Connect endpoint.
- D
Enable the required Google APIs in your project.
- E
Connect your on-premises network to your VPC using a VPN or Interconnect.
Show answer and explanation
Correct answers: A, C, D, E
Explanation
Private Service Connect for Google APIs allows secure, private access to Google services from on-premises locations via a VPC. The required steps include creating a Private Service Connect endpoint in your VPC, enabling the necessary Google APIs, configuring DNS forwarding to resolve private.googleapis.com to the endpoint, and establishing connectivity between your on-premises network and the VPC (via VPN or Interconnect). Public IP addresses are not required in this setup because communication happens over private IPs.
- A. Correct.
Correct: Creating a Private Service Connect endpoint in your VPC is a required step to connect privately to Google APIs.
- B. Incorrect.
Incorrect: Public IPs are not required for Private Service Connect as it enables private connectivity to Google APIs through internal IP addresses.
- C. Correct.
Correct: DNS forwarding is essential to ensure that requests to private.googleapis.com are routed through the Private Service Connect endpoint.
- D. Correct.
Correct: The Google APIs you want to access need to be enabled in your project to allow communication.
- E. Correct.
Correct: Your on-premises network must be connected to your VPC using a VPN or Interconnect to route traffic privately to the Private Service Connect endpoint.