Google Professional Cloud Network Engineer Question 603
Select 2Google Cloud PlatformYour organization wants to enforce secure web traffic for all users by routing their HTTP and HTTPS traffic through a Secure Web Proxy deployed on Google Cloud. Which steps must you take to configure this setup correctly?
- A
Configure a Google Cloud Load Balancer to forward traffic to the Secure Web Proxy instance.
- B
Enable VPC firewall rules to allow egress traffic from user devices to the Secure Web Proxy.
- C
Set up a Cloud NAT instance to route requests from the Secure Web Proxy to the internet.
- D
Deploy the Secure Web Proxy as a managed service using Cloud Armor.
- E
Configure user devices or on-premises systems to use the Secure Web Proxy's IP or DNS address.
Show answer and explanation
Correct answers: B, E
Explanation
To configure a Secure Web Proxy, you must ensure that user traffic is routed to the proxy instance and allowed through the VPC network. This involves enabling the necessary VPC firewall rules and updating user devices or on-premises systems to use the proxy’s IP or DNS address. Other options, such as Load Balancers and Cloud NAT, are not relevant in this scenario.
- A. Incorrect.
Configuring a Load Balancer is not needed in this setup because the Secure Web Proxy itself handles the routing and does not require load balancing for basic functionality.
- B. Correct.
Enabling VPC firewall rules is essential to ensure that traffic from user devices is allowed to reach the Secure Web Proxy instance.
- C. Incorrect.
Cloud NAT is not required because the Secure Web Proxy is designed to handle outbound internet traffic directly without the need for NAT.
- D. Incorrect.
Secure Web Proxy is not a managed service under Cloud Armor. Cloud Armor is used for web application security, not for proxying traffic.
- E. Correct.
User devices or on-premises systems must be configured to route traffic through the Secure Web Proxy by specifying its IP address or DNS name. Without this configuration, the traffic will not be redirected to the proxy.