Google Professional Cloud Network Engineer Question 28
Single answerGoogle Cloud PlatformYour organization has a hybrid cloud setup where workloads are deployed both on-premises and in Google Cloud. You need to ensure that your on-premises systems can access Google APIs and services securely without exposing them to the public internet. Which solution should you implement?
- A
Enable Private Google Access for hybrid connectivity and configure a Cloud VPN or Interconnect connection.
- B
Set up a public NAT gateway in Google Cloud to route traffic from on-premises to Google APIs.
- C
Use VPC Service Controls to restrict access to Google APIs from your on-premises systems.
- D
Directly configure your on-premises systems with public DNS records for Google APIs.
Show answer and explanation
Correct answer: A
Explanation
To securely access Google APIs and services from on-premises systems in a hybrid cloud setup, you should use Private Google Access for hybrid connectivity. This ensures that traffic to Google APIs remains private and secure by leveraging a Cloud VPN or Interconnect connection, avoiding the need to traverse the public internet.
- A. Correct.
This is the correct solution. Private Google Access for hybrid connectivity allows on-premises systems to securely access Google APIs via a private connection established through Cloud VPN or Dedicated/Partner Interconnect.
- B. Incorrect.
This is incorrect because setting up a public NAT gateway exposes traffic to the public internet, which is not a secure solution for hybrid connectivity.
- C. Incorrect.
While VPC Service Controls enhance security, they are not designed to enable private access to Google APIs from on-premises systems.
- D. Incorrect.
Directly configuring on-premises systems with public DNS records for Google APIs would route traffic over the public internet, which does not meet the requirement for secure, private access.