Google Professional Cloud Network Engineer Question 601
Select 3Google Cloud PlatformYour company wants to ensure secure web traffic for all employees by routing HTTP and HTTPS traffic through a secure web proxy. You are tasked with configuring this setup using Google Cloud. Which steps must you take to configure the secure web proxy correctly?
- A
Create a Google Cloud NAT gateway and configure it to route traffic through the proxy server.
- B
Set up firewall rules to allow egress web traffic only to the secure web proxy IP address.
- C
Configure a Cloud Router to manage dynamic routes for the secure web proxy.
- D
Update the VPC route table to forward HTTP and HTTPS traffic to the secure web proxy.
- E
Deploy a managed instance group with a proxy server and configure the proxy settings on client devices.
Show answer and explanation
Correct answers: B, D, E
Explanation
To configure a secure web proxy in Google Cloud, you need to ensure that all egress HTTP and HTTPS traffic is routed through the proxy. This involves restricting web traffic with firewall rules, updating the VPC route table to direct traffic to the proxy, and deploying a proxy server (e.g., using a managed instance group). Configuring Cloud NAT or Cloud Router is not specifically required in this scenario.
- A. Incorrect.
Incorrect. While Cloud NAT can be used to manage outbound traffic, it is not specifically required for configuring a secure web proxy.
- B. Correct.
Correct. Firewall rules must be configured to restrict egress web traffic to only the secure web proxy IP address, ensuring traffic is routed securely.
- C. Incorrect.
Incorrect. A Cloud Router is primarily used for managing dynamic routing with hybrid connectivity or multi-cloud setups. It is not required for a secure web proxy configuration.
- D. Correct.
Correct. Updating the VPC route table ensures that traffic destined for HTTP and HTTPS is directed to the secure web proxy.
- E. Correct.
Correct. Deploying a managed instance group with a proxy server and configuring client devices ensures that traffic is routed through the secure web proxy.