Google Professional Cloud Network Engineer Question 29
Single answerGoogle Cloud PlatformYour company has a hybrid cloud setup with on-premises resources connected to Google Cloud through a VPN. Several workloads in Google Cloud require access to Google APIs and services, such as Cloud Storage and BigQuery, without exposing these services to the public internet. How can you ensure secure and private access to Google APIs and services from your Google Cloud workloads in this hybrid setup?
- A
Enable Private Google Access for on-premises networks in your VPC.
- B
Configure a NAT gateway in your VPC to allow outbound internet access for workloads.
- C
Enable Private Google Access in your VPC subnets where the workloads reside.
- D
Set up a Cloud Interconnect connection and configure firewall rules to allow access to Google APIs.
Show answer and explanation
Correct answer: C
Explanation
To ensure secure and private access to Google APIs and services from workloads in Google Cloud, enabling Private Google Access in the relevant VPC subnets is the correct approach. This allows workloads in private IP subnets to communicate with Google APIs and services without requiring public IP addresses or routing traffic through the public internet. Other options, such as NAT gateways or Cloud Interconnect, do not fulfill the requirement for private access to Google APIs within the Google Cloud environment.
- A. Incorrect.
Private Google Access for on-premises networks is used to enable private access to Google APIs from on-premises systems, but it does not apply to workloads running in Google Cloud.
- B. Incorrect.
A NAT gateway provides outbound internet access for resources in private subnets, but it does not provide private access to Google APIs and services.
- C. Correct.
Enabling Private Google Access in VPC subnets ensures that workloads in those subnets can securely and privately access Google APIs and services without using public IPs or traversing the internet.
- D. Incorrect.
Cloud Interconnect provides high-bandwidth connectivity between on-premises resources and Google Cloud but does not inherently provide private access to Google APIs and services.