Google Professional Cloud Network Engineer Question 604
Select 2Google Cloud PlatformYour organization has implemented a secure web proxy solution on Google Cloud for outbound internet traffic. You need to configure your VPC network so that traffic from instances in a specific subnet is routed through the secure web proxy. Which steps should you take to achieve this configuration?
- A
Create a custom static route with the secure web proxy as the next hop and apply it to the desired subnet.
- B
Enable the Private Google Access setting on the subnet where the instances reside.
- C
Configure a firewall rule to allow egress traffic from the subnet to the secure web proxy.
- D
Set up a URL map in a load balancer to direct traffic to the secure web proxy.
- E
Use a Cloud NAT gateway to route traffic from the subnet to the secure web proxy.
Show answer and explanation
Correct answers: A, C
Explanation
To route traffic through a secure web proxy, you need to define a custom static route with the secure web proxy as the next hop and apply it to the desired subnet. Additionally, a firewall rule must be created to allow egress traffic from the subnet to the secure web proxy. Enabling Private Google Access, setting up a URL map, or using a Cloud NAT gateway are not relevant to this use case.
- A. Correct.
Correct: Configuring a custom static route with the secure web proxy as the next hop ensures that traffic from the subnet is directed through the proxy.
- B. Incorrect.
Incorrect: Private Google Access is used for accessing Google APIs and services from private IPs in your VPC, but it is not related to routing traffic through a secure web proxy.
- C. Correct.
Correct: A firewall rule is necessary to allow traffic from the subnet to reach the secure web proxy.
- D. Incorrect.
Incorrect: URL maps in load balancers are used for HTTP(S) traffic redirection and are not involved in configuring secure web proxies.
- E. Incorrect.
Incorrect: Cloud NAT is used for providing external IPs for instances without external IPs, but it does not route traffic through a secure web proxy.