Google Professional Cloud Network Engineer Question 600
Select 3Google Cloud PlatformYour company wants to enforce secure web traffic routing for all users accessing external websites. You are tasked with configuring a secure web proxy in Google Cloud. Which steps should you take to implement this solution effectively?
- A
Configure a Cloud Load Balancer to route traffic to a proxy server.
- B
Deploy a VM instance with a web proxy solution, such as Squid, and configure firewall rules to allow traffic.
- C
Enable SSL inspection on the proxy server to decrypt and inspect HTTPS traffic.
- D
Set up a Cloud NAT gateway to allow outbound traffic from the proxy server.
- E
Create a custom route in the VPC to direct all user traffic through the proxy server.
Show answer and explanation
Correct answers: B, C, E
Explanation
To configure a secure web proxy in Google Cloud, you need to deploy a web proxy solution like Squid on a VM instance, enable SSL inspection for HTTPS traffic, and set up custom routes in the VPC to direct user traffic through the proxy server. Cloud Load Balancers and Cloud NAT gateways are not directly relevant to setting up a secure web proxy.
- A. Incorrect.
Incorrect: While Cloud Load Balancers can distribute traffic, they are not used to enforce secure web proxy configurations directly.
- B. Correct.
Correct: A VM instance running a web proxy solution like Squid is a common way to implement a secure web proxy in Google Cloud.
- C. Correct.
Correct: SSL inspection is necessary to decrypt and inspect HTTPS traffic for security purposes. This is a key feature of a secure web proxy.
- D. Incorrect.
Incorrect: A Cloud NAT gateway is used to provide internet access to resources without public IP addresses, but it is not required for a secure web proxy setup.
- E. Correct.
Correct: Creating a custom route directs user traffic through the deployed proxy server, ensuring traffic is inspected and secured.