Google Professional Cloud Network Engineer Question 30
Select 4Google Cloud PlatformYour company has a hybrid cloud environment with workloads running both on-premises and in Google Cloud. To ensure secure and efficient access to Google APIs and services from your on-premises systems, you need to configure Private Google Access for hybrid connectivity. Which of the following steps are necessary to enable this functionality?
- A
Ensure that your on-premises network is connected to Google Cloud via a Cloud VPN or Interconnect.
- B
Configure a custom static route in your VPC to direct traffic for Google APIs and services through the default internet gateway.
- C
Enable Private Google Access on the subnet where the on-premises traffic enters the VPC.
- D
Add appropriate firewall rules to allow traffic from your on-premises network to access the Google APIs and services.
- E
Configure DNS to resolve Google API domains to private IP addresses.
Show answer and explanation
Correct answers: A, C, D, E
Explanation
To enable Private Google Access for hybrid connectivity, you must establish a hybrid connection (e.g., Cloud VPN or Interconnect), enable Private Google Access on the appropriate subnet, and ensure proper firewall rules and DNS configurations are in place. This ensures that Google APIs and services are accessed securely and privately using internal IP addresses, rather than through public internet gateways.
- A. Correct.
Correct: A hybrid connectivity solution like Cloud VPN or Interconnect is required to establish a connection between your on-premises network and Google Cloud.
- B. Incorrect.
Incorrect: Traffic to Google APIs and services should not be routed through the default internet gateway; it should use private IP addresses for Private Google Access.
- C. Correct.
Correct: Enabling Private Google Access on the appropriate VPC subnet is necessary to allow instances in that subnet to access Google APIs and services privately.
- D. Correct.
Correct: Firewall rules are needed to permit traffic from the on-premises network to reach Google APIs and services.
- E. Correct.
Correct: DNS must be configured to resolve Google API domains to private IP addresses to utilize Private Google Access.