Google Professional Cloud Network Engineer Question 48
Select 2Google Cloud PlatformYou are designing a hybrid network for a company that uses Google Cloud. The company requires secure, private connectivity to Google Cloud managed services like Cloud SQL, BigQuery, and Pub/Sub from their on-premises data center. The solution must minimize exposure to the public internet and ensure high performance. Which connectivity options should you implement to meet these requirements?
- A
Use Private Service Connect to establish private endpoints for managed services and route traffic securely.
- B
Use Serverless VPC Access to connect directly from your on-premises data center to managed services.
- C
Use Private Google Access to allow resources in your VPC to securely access managed services.
- D
Use private services access to connect the on-premises network to managed services through a VPC network.
- E
Use a public NAT gateway to route on-premises traffic to managed services.
Show answer and explanation
Correct answers: A, D
Explanation
To securely connect an on-premises data center to Google Cloud managed services while avoiding public internet exposure, you should use Private Service Connect for private endpoints and private services access for private connectivity through a VPC. These solutions ensure private, high-performance communication and meet the security and performance requirements.
- A. Correct.
Private Service Connect allows you to establish private endpoints within your network to access Google-managed services securely, eliminating the need for public IPs.
- B. Incorrect.
Serverless VPC Access is designed for serverless environments (e.g., Cloud Run, Cloud Functions) to connect to a VPC, not for on-premises connectivity.
- C. Incorrect.
Private Google Access enables private communication between resources in a VPC and Google APIs/services but does not directly address on-premises connectivity.
- D. Correct.
Private services access allows you to connect an on-premises network to managed services through a VPC network by provisioning private IP ranges.
- E. Incorrect.
Using a public NAT gateway would expose traffic to the public internet, violating the requirement for secure, private connectivity.