Google Professional Cloud Network Engineer Question 4
Select 4Google Cloud PlatformYour organization is planning to migrate its on-premises applications to Google Cloud. You need to design the overall network architecture to support this migration. The architecture must ensure low latency between on-premises and Google Cloud, scalability for future growth, and secure communication. Which of the following design considerations should you include?
- A
Use Cloud VPN to establish a secure IPSec tunnel between on-premises and Google Cloud.
- B
Implement a Dedicated Interconnect for high-bandwidth and low-latency connectivity.
- C
Rely solely on public IPs for application communication between on-premises and Google Cloud.
- D
Use a Shared VPC to centralize network management and connect multiple projects.
- E
Configure firewall rules to restrict access to only the necessary ports and IP ranges.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Designing a network architecture for a hybrid cloud setup requires considering low-latency, secure communication, scalability, and centralized management. Cloud VPN and Dedicated Interconnect address connectivity needs, while Shared VPC and firewall rules enhance manageability and security. Relying on public IPs alone is not recommended due to potential security and latency concerns.
- A. Correct.
This is correct because Cloud VPN provides secure, encrypted communication between on-premises and Google Cloud. However, it might not fully address low-latency needs for high-bandwidth workloads.
- B. Correct.
This is correct because Dedicated Interconnect provides high-bandwidth, low-latency connectivity, which is ideal for hybrid architectures with significant traffic between on-premises and Google Cloud.
- C. Incorrect.
This is incorrect because relying solely on public IPs may expose applications to security risks and increase latency. Using private connectivity options is a better practice.
- D. Correct.
This is correct because a Shared VPC allows you to centralize network management and efficiently manage connectivity for multiple projects, which aligns with scalability and manageability requirements.
- E. Correct.
This is correct because configuring specific firewall rules ensures secure communication by restricting access to only authorized traffic, reducing the attack surface.