Google Professional Cloud Network Engineer Question 26
Select 2Google Cloud PlatformYou are designing a hybrid connectivity solution for your organization. You need to ensure that virtual machines in your on-premises network can access Google APIs and services (e.g., Cloud Storage, BigQuery) privately over a dedicated interconnection, without exposing traffic to the public internet. Which of the following must be configured to meet this requirement?
- A
Enable Private Google Access on the on-premises subnet.
- B
Set up a Cloud Interconnect or Cloud VPN connection between your on-premises network and Google Cloud.
- C
Configure a static route on the on-premises router to direct traffic to Google's private IP ranges.
- D
Enable Private Google Access on the Google Cloud subnets hosting the workloads.
- E
Configure the VPC Peering connection to allow private communication between on-premises and Google APIs.
Show answer and explanation
Correct answers: B, C
Explanation
To allow on-premises systems to access Google APIs and services privately over a hybrid connection, you must establish a private connection using Cloud Interconnect or Cloud VPN. Additionally, you must configure static routes on the on-premises router to forward traffic for Google's private IP ranges through the established connection. Private Google Access is specific to Google Cloud subnets and does not apply to on-premises networks.
- A. Incorrect.
Incorrect. Private Google Access is a feature for Google Cloud subnets, not for on-premises subnets. It allows instances without public IPs in a Google Cloud subnet to access Google APIs and services privately.
- B. Correct.
Correct. To enable hybrid connectivity, you need a connection such as Cloud Interconnect or Cloud VPN to establish private communication between on-premises and Google Cloud.
- C. Correct.
Correct. A static route is needed on the on-premises router to forward traffic destined for Google's private IP ranges (e.g., 199.36.153.8/30) through the hybrid connection.
- D. Incorrect.
Incorrect. While enabling Private Google Access is necessary for Google Cloud subnets, it does not apply to on-premises networks. This setting is irrelevant in this context.
- E. Incorrect.
Incorrect. VPC Peering facilitates private communication between two VPC networks but is not related to connecting on-premises networks to Google APIs and services.