Google Professional Cloud Network Engineer Question 3
Select 3Google Cloud PlatformYou are tasked with designing a network architecture for a company that plans to run a hybrid cloud setup using Google Cloud and their on-premises data center. The company has strict compliance requirements to ensure that sensitive data never leaves their private on-premises network, while non-sensitive workloads can run in Google Cloud. Which of the following considerations are MOST important when designing the overall network architecture to meet these requirements?
- A
Implementing a Dedicated Interconnect or VPN to establish connectivity between Google Cloud and the on-premises network
- B
Using Google Cloud's Shared VPC to centrally manage network resources across multiple projects
- C
Configuring private Google Access for on-premises workloads to securely access Google APIs without exposing them to the internet
- D
Designing custom IAM roles to restrict access to sensitive data in Google Cloud
- E
Setting up firewall rules to restrict traffic between on-premises and Google Cloud based on compliance requirements
Show answer and explanation
Correct answers: A, C, E
Explanation
Designing a hybrid cloud network architecture requires secure and efficient connectivity between on-premises and Google Cloud while adhering to compliance requirements. A Dedicated Interconnect or VPN ensures secure connectivity, private Google Access enables secure communication with Google APIs, and firewall rules provide control over traffic to enforce compliance. Shared VPC and IAM roles are valuable but do not directly address the specific compliance and connectivity needs of this scenario.
- A. Correct.
Correct: A Dedicated Interconnect or VPN is essential for securely connecting the on-premises network to Google Cloud and meeting the hybrid cloud requirements.
- B. Incorrect.
Incorrect: While Shared VPC is useful for centralizing network resource management, it does not specifically address the compliance requirement to keep sensitive data on-premises.
- C. Correct.
Correct: Private Google Access ensures on-premises workloads can securely access Google APIs without exposing them to the public internet, aligning with compliance and security requirements.
- D. Incorrect.
Incorrect: While IAM roles are important for access control, they do not address the need for network-level compliance or connectivity between on-premises and Google Cloud.
- E. Correct.
Correct: Firewall rules are critical for enforcing compliance requirements by restricting and controlling traffic flow between on-premises and Google Cloud.