Google Professional Cloud Network Engineer Question 2
Select 3Google Cloud PlatformYou are designing the network architecture for a new application deployment on Google Cloud. The application requires a highly available and secure setup with low latency for global users. It also needs to integrate with an existing on-premises environment. Which considerations should you prioritize when designing the network architecture?
- A
Set up a multi-region Virtual Private Cloud (VPC) with subnets in each region to reduce latency for global users.
- B
Use Cloud VPN or Interconnect to establish secure connectivity to the on-premises environment.
- C
Enable private Google access for the VPC to ensure secure and low-latency access to Google APIs and services.
- D
Deploy a single-region VPC and rely on global load balancing to handle traffic from all regions.
- E
Implement a firewall rule allowing all inbound traffic to improve application reachability.
Show answer and explanation
Correct answers: A, B, C
Explanation
To meet the requirements of a highly available, secure, and low-latency network architecture for global users and on-premises integration, you should design a multi-region VPC, establish secure connectivity using Cloud VPN or Interconnect, and enable private Google access for optimized performance and security. A single-region VPC or overly permissive firewall rules would not fulfill these requirements.
- A. Correct.
Correct: A multi-region VPC with subnets in each region ensures low latency for global users by placing resources closer to their physical locations.
- B. Correct.
Correct: Using Cloud VPN or Interconnect is essential for providing secure and reliable connectivity between the Google Cloud environment and the on-premises network.
- C. Correct.
Correct: Enabling private Google access allows resources in the VPC to securely communicate with Google APIs and services without traversing the public internet, reducing latency and enhancing security.
- D. Incorrect.
Incorrect: While global load balancing is useful, relying solely on a single-region VPC would not guarantee low latency for global users or meet the requirements for high availability.
- E. Incorrect.
Incorrect: Allowing all inbound traffic through a firewall rule is a security risk and does not align with best practices for secure and controlled network architecture.