Google Professional Cloud Network Engineer Question 344
Single answerGoogle Cloud PlatformYou are designing a Google Cloud network architecture for a multi-tier application. The application consists of a front-end hosted on an instance group behind an HTTP(S) Load Balancer, a set of microservices running in a private subnet, and a Cloud SQL database. The microservices in the private subnet need to connect to external APIs over the internet. Which Google Cloud feature would you use to enable this connection while ensuring the microservices remain in the private subnet?
- A
Cloud NAT
- B
VPC Peering
- C
Cloud VPN
- D
Private Google Access
Show answer and explanation
Correct answer: A
Explanation
To enable private subnet resources to connect to external APIs over the internet, Cloud NAT is the appropriate solution. It ensures that the resources can communicate with external systems without requiring an external IP address, maintaining the private nature of the subnet.
- A. Correct.
Cloud NAT allows resources in a private subnet to access the internet without needing an external IP address, which is the correct solution for this scenario.
- B. Incorrect.
VPC Peering is used to connect two VPC networks privately, but it does not facilitate internet access for resources in a private subnet.
- C. Incorrect.
Cloud VPN is used for securely connecting on-premises networks to Google Cloud, but it is not applicable for enabling internet access for private subnets.
- D. Incorrect.
Private Google Access allows resources in a private subnet to access Google APIs and services, but it does not provide access to external APIs over the internet.