Google Professional Cloud Network Engineer Question 47
Select 2Google Cloud PlatformYour organization is deploying a new application that requires access to a Google-managed service, such as Cloud SQL, from a Virtual Private Cloud (VPC). The connection must be private, ensuring that traffic does not traverse the public internet. Which of the following solutions can be used to achieve this requirement?
- A
Use Private Service Connect to establish a private connection to the managed service.
- B
Configure a Serverless VPC Access connector to enable private connectivity between your VPC and the managed service.
- C
Enable Private Google Access for the subnet where your workloads are running.
- D
Use a VPN tunnel to route traffic from your VPC to the managed service.
- E
Set up Private Services Access to allocate private IP ranges for the managed service.
Show answer and explanation
Correct answers: A, E
Explanation
To ensure private connectivity to Google-managed services like Cloud SQL, you can use solutions like Private Service Connect and Private Services Access. These options route traffic privately within Google's network, avoiding the public internet. Private Service Connect establishes private connections, while Private Services Access allocates private IP ranges for the managed service. Other options, like enabling Private Google Access or using Serverless VPC Access, do not directly achieve the requirements of the scenario.
- A. Correct.
Correct. Private Service Connect allows you to establish a private connection to Google-managed services while keeping traffic private and avoiding the public internet.
- B. Incorrect.
Incorrect. Serverless VPC Access is used to connect serverless environments like Cloud Run, App Engine, or Cloud Functions to a VPC, but it does not directly enable private connectivity to Google-managed services.
- C. Incorrect.
Incorrect. Enabling Private Google Access allows resources in a subnet to access Google APIs and services privately, but it is not sufficient for connecting to managed services like Cloud SQL.
- D. Incorrect.
Incorrect. A VPN tunnel is used to connect on-premises networks to Google Cloud, but it is not required for private connectivity between a VPC and Google-managed services.
- E. Correct.
Correct. Private Services Access allows you to allocate private IP ranges for Google-managed services like Cloud SQL, ensuring private connectivity.