Google Professional Cloud Network Engineer Question 214
Select 3Google Cloud PlatformYour organization needs to set up a Virtual Private Cloud (VPC) in Google Cloud to host multiple applications. Each application requires its own subnet for isolation, and one application needs to connect to a Google-managed service using Private Google Access. Additionally, the security team requires strict control over traffic entering and exiting the subnets. Which steps should you take to configure the VPC correctly?
- A
Create a custom VPC and define multiple subnets for each region where the applications will run.
- B
Enable Private Google Access on the subnet that needs to connect to the Google-managed service.
- C
Create firewall rules to allow inbound traffic to the applications and deny all other traffic.
- D
Use the default VPC and rely on its default configurations for firewall rules and subnets.
- E
Create a private services access subnet to enable connectivity to the Google-managed service.
Show answer and explanation
Correct answers: A, B, C
Explanation
To configure the VPC for the described requirements, you need to create a custom VPC with multiple subnets for application isolation. Enabling Private Google Access on the relevant subnet allows it to connect to Google-managed services securely. Additionally, creating explicit firewall rules ensures strict control over traffic as mandated by the security team. Using the default VPC or creating a private services access subnet does not meet the specific requirements described in the scenario.
- A. Correct.
Correct. A custom VPC with defined subnets is required for isolating applications and ensuring proper network segmentation.
- B. Correct.
Correct. Private Google Access is necessary to allow subnets to communicate securely with Google-managed services without using public IP addresses.
- C. Correct.
Correct. Firewall rules need to be explicitly defined to control traffic entering and exiting the subnets, ensuring compliance with the security team's requirements.
- D. Incorrect.
Incorrect. The default VPC is not suitable because it does not provide the required level of customization or isolation for the applications.
- E. Incorrect.
Incorrect. While private services access is a related concept, it is not required for enabling Private Google Access. The question specifically mentions Private Google Access, not private services access.