Google Professional Cloud Network Engineer Question 207
Select 3Google Cloud PlatformYou are tasked with configuring a Virtual Private Cloud (VPC) for a new application in Google Cloud. The application requires high availability across multiple regions, and you need to ensure that the network is segmented to separate public-facing services from internal-facing services. Which of the following steps should you take to meet these requirements?
- A
Create a single VPC with subnets in multiple regions and use firewall rules to control traffic between public and private services.
- B
Use a Shared VPC to allow multiple projects to share the same network while maintaining centralized control of resources.
- C
Configure multiple VPCs to represent different environments (e.g., development, staging, production) and use VPC Peering to connect them.
- D
Enable Private Google Access for the subnets to ensure that internal services can securely access Google APIs and services.
- E
Use Cloud NAT to provide internet access to private instances without exposing them to the internet.
Show answer and explanation
Correct answers: A, D, E
Explanation
To meet the requirements for high availability across multiple regions and separation of public and private services, you should create a single VPC with subnets in multiple regions for resource distribution and use firewall rules for segmentation. Enabling Private Google Access ensures secure access to Google APIs for internal services, and using Cloud NAT provides secure internet access for private instances without exposing them directly.
- A. Correct.
Correct: Creating a single VPC with subnets in multiple regions ensures high availability by spreading resources across regions. Using firewall rules allows for segmentation of public and private services within the same VPC.
- B. Incorrect.
Incorrect: While Shared VPC is useful for sharing networks across multiple projects, it is not directly related to segmenting public and private services within a single application.
- C. Incorrect.
Incorrect: Configuring multiple VPCs for different environments is a good practice, but it does not address the specific requirements of segmenting public and private services or ensuring high availability across regions.
- D. Correct.
Correct: Enabling Private Google Access allows private instances to securely access Google APIs and services without requiring public IP addresses, which is critical for internal services.
- E. Correct.
Correct: Cloud NAT provides internet access to private instances without exposing them to the internet, ensuring security for private services.