Google Professional Cloud Network Engineer Question 602
Select 3Google Cloud PlatformYour organization requires all outbound web traffic from workloads in Google Cloud to pass through a secure web proxy for inspection and filtering. You are tasked with configuring this setup. Which steps should you take to implement this requirement securely and effectively?
- A
Set up a custom route in the VPC to forward traffic to the secure web proxy's IP address.
- B
Configure a NAT gateway to route all traffic through the secure web proxy automatically.
- C
Deploy a Google Cloud firewall rule to block direct outbound web traffic from workloads.
- D
Use a Proxy PAC file or environment variables to configure workloads to direct web traffic to the secure web proxy.
- E
Enable Identity-Aware Proxy (IAP) to ensure outbound traffic is secure and inspected by the proxy.
Show answer and explanation
Correct answers: A, C, D
Explanation
To configure a secure web proxy in Google Cloud, you must ensure that all outbound web traffic is directed to the proxy for inspection. This involves configuring a custom route in the VPC, deploying a firewall rule to block direct traffic, and setting up workloads to use the proxy via a Proxy PAC file or environment variables. These steps collectively ensure the secure routing of traffic through the web proxy.
- A. Correct.
This is correct. A custom route in the VPC is necessary to ensure that traffic is forwarded to the secure web proxy's IP address for inspection.
- B. Incorrect.
This is incorrect. A NAT gateway is used for internet access but does not inherently route traffic through a secure web proxy. Additional configurations are required.
- C. Correct.
This is correct. A firewall rule is needed to block direct outbound web traffic, ensuring that all traffic passes through the secure web proxy.
- D. Correct.
This is correct. Configuring workloads to use a Proxy PAC file or environment variables ensures that they direct their web traffic to the secure web proxy.
- E. Incorrect.
This is incorrect. Identity-Aware Proxy (IAP) is used to secure access to applications, not for routing outbound web traffic through a secure web proxy.