Google Professional Cloud Network Engineer Question 57
Select 4Google Cloud PlatformYour organization is using Google Cloud to host sensitive data in BigQuery. To secure access to this data, you are tasked with designing a solution using VPC Service Controls. Which of the following steps are necessary to implement VPC Service Controls effectively for this requirement?
- A
Define a service perimeter and include the BigQuery service in it.
- B
Configure private Google access for on-premises resources to communicate with the BigQuery service.
- C
Add Google Cloud Storage to the same service perimeter as BigQuery for secure data transfers between services.
- D
Create VPC peering between the service perimeter and external networks to allow secure data sharing.
- E
Enable the VPC Service Controls API in the project containing BigQuery.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To implement VPC Service Controls for securing BigQuery data, you must define a service perimeter around BigQuery, enable the VPC Service Controls API, and configure private Google access for secure communication from on-premises networks. Additionally, if data transfers occur between BigQuery and other Google services like Cloud Storage, those services must also be included in the same perimeter. VPC peering is unrelated to VPC Service Controls and conflicts with its purpose of restricting access to external networks.
- A. Correct.
Defining a service perimeter and including BigQuery is a critical step in implementing VPC Service Controls for securing access to BigQuery.
- B. Correct.
Private Google access ensures that on-premises resources can securely access Google Cloud services like BigQuery without exposing traffic over the public internet.
- C. Correct.
Adding Google Cloud Storage to the same service perimeter is necessary for secure data transfers between BigQuery and Cloud Storage, as both services need to operate within the same perimeter.
- D. Incorrect.
VPC peering is not a required step for VPC Service Controls. Data sharing with external networks is restricted under VPC Service Controls, and peering doesn't align with this security model.
- E. Correct.
Enabling the VPC Service Controls API is essential for using its features and managing the service perimeters effectively.