Google Professional Cloud Network Engineer Question 68
Single answerGoogle Cloud PlatformYour organization is migrating its applications to Google Cloud. The organization consists of multiple business units, each with its own IT team, and each business unit needs to maintain administrative independence for its projects. However, there are shared services like monitoring and logging that need to be centrally managed. What is the most appropriate VPC design for this scenario?
- A
Create a standalone VPC for each business unit and configure peering between them.
- B
Use a Shared VPC where each business unit’s projects are attached as service projects to a centrally managed host project.
- C
Create a single standalone VPC and allow each business unit to manage its own resources within that VPC.
- D
Use multiple standalone VPCs and rely on Cloud VPN or Interconnect to connect them.
Show answer and explanation
Correct answer: B
Explanation
A Shared VPC is the best choice for organizations with multiple business units that require administrative independence while also needing centralized management of shared services. The host project in a Shared VPC enables centralized control over shared resources, while each business unit can have its own service projects to manage its applications independently. This approach simplifies connectivity and ensures better governance compared to standalone VPCs with peering or other connectivity solutions.
- A. Incorrect.
This approach would allow each business unit to have its own VPC, but configuring and managing VPC peering for multiple VPCs can become complex, especially for shared services like logging and monitoring.
- B. Correct.
Using a Shared VPC is the recommended approach as it allows centralized management of shared resources (like logging and monitoring) while enabling administrative independence for individual service projects.
- C. Incorrect.
A single standalone VPC does not provide administrative independence for each business unit, as they would all share the same administrative domain.
- D. Incorrect.
Using multiple standalone VPCs can work, but it sacrifices centralized management of shared services and introduces complexity in managing connectivity through Cloud VPN or Interconnect.