Google Professional Cloud Network Engineer exam dumps

Google Professional Cloud Network Engineer practice question 49 of 790

Professional Cloud Network Engineer. Professional level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Network Engineer Question 49

Select 2Google Cloud Platform

Your organization is deploying an application that requires access to several Google Cloud-managed services, including Cloud SQL, Cloud Storage, and Cloud Run. The organization’s security policy mandates that all connectivity to these services must not traverse the public internet. You are tasked with designing the network architecture to meet this requirement. Which of the following solutions should you use to achieve this?

  1. A

    Use Private Service Connect to connect to Cloud SQL and Cloud Storage.

  2. B

    Use Private Services Access to enable private IPs for Cloud SQL.

  3. C

    Use Serverless VPC Access to connect your application to Cloud Run.

  4. D

    Use Private Service Connect to connect to both Cloud SQL and Cloud Run.

  5. E

    Use Serverless VPC Access to connect your application to Cloud Storage.

Show answer and explanation

Correct answers: A, B

Explanation

To meet the requirement of avoiding public internet exposure, you need to use Private Service Connect for private connectivity to managed services like Cloud SQL and Cloud Storage. Additionally, Private Services Access is required to allocate private IP ranges for services like Cloud SQL. Serverless VPC Access is not relevant in this case as the application does not involve connecting serverless environments to a VPC.

  • A. Correct.

    Correct. Private Service Connect allows you to privately connect to Google-managed services like Cloud SQL and Cloud Storage over private networks, avoiding public internet exposure.

  • B. Correct.

    Correct. Private Services Access is required to allocate a private IP range for Google-managed services like Cloud SQL, ensuring private connectivity.

  • C. Incorrect.

    Incorrect. Serverless VPC Access is used to connect serverless environments (e.g., Cloud Functions, Cloud Run) to VPC networks, not for direct connectivity to managed services.

  • D. Incorrect.

    Incorrect. While Private Service Connect can connect to Cloud SQL, it does not connect to Cloud Run. Cloud Run typically requires Serverless VPC Access to connect to VPC networks.

  • E. Incorrect.

    Incorrect. Serverless VPC Access does not connect serverless applications directly to managed services like Cloud Storage.

Timed practice exam

Take a Google Professional Cloud Network Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Professional Cloud Network Engineer practice questions

  1. 50.Your company is deploying a new application that requires connectivity to a managed Google Cloud...
  2. 51.Your company is deploying a global web application hosted on Google Cloud, and you want to ensure...
  3. 52.Your company is deploying a globally distributed application on Google Cloud that requires...
  4. 53.Your organization is deploying a latency-sensitive application on Google Cloud that requires...
  5. 54.Your company has a global web application hosted on Google Cloud. You want to ensure users...
Back to the Google Professional Cloud Network Engineer exam dumps