Google Professional Cloud Network Engineer Question 27
Single answerGoogle Cloud PlatformYour organization has a hybrid cloud architecture with workloads running on both on-premises systems and Google Cloud. You need to ensure that on-premises systems can access Google APIs and services privately, without exposing traffic to the public internet. Which solution should you implement?
- A
Enable Private Google Access on your on-premises network and configure it to route traffic through a Cloud VPN or Interconnect.
- B
Configure a public DNS resolver on your on-premises network to resolve Google API endpoints.
- C
Set up a NAT Gateway in Google Cloud to allow on-premises systems to access Google APIs privately.
- D
Establish a Cloud VPN or Interconnect connection and set up Private Service Connect for hybrid connectivity.
Show answer and explanation
Correct answer: A
Explanation
Private Google Access for hybrid connectivity allows on-premises systems to access Google APIs and services privately, without routing traffic through the public internet. This is achieved by enabling Private Google Access and routing traffic through a secure connection such as Cloud VPN or Interconnect. This ensures secure and private communication between on-premises systems and Google Cloud resources.
- A. Correct.
Correct: To allow on-premises systems to access Google APIs and services privately, you need to enable Private Google Access for hybrid connectivity and route traffic through a Cloud VPN or Interconnect connection.
- B. Incorrect.
Incorrect: Using a public DNS resolver exposes traffic to the public internet, which does not meet the requirement for private access to Google APIs.
- C. Incorrect.
Incorrect: A NAT Gateway is not required or sufficient to provide private access to Google APIs for on-premises systems.
- D. Incorrect.
Incorrect: While Private Service Connect is useful for accessing Google services privately, it is not the appropriate solution for enabling Private Google Access for hybrid connectivity.