Google Professional Cloud Network Engineer Question 69
Single answerGoogle Cloud PlatformYour organization is planning to migrate its workloads to Google Cloud. You have multiple projects and need to enforce centralized control over network configurations such as subnets, firewall rules, and routes while allowing individual teams to manage their own resources. Which VPC setup would best meet these requirements?
- A
Standalone VPCs for each project
- B
A Shared VPC with host and service projects
- C
Multiple standalone VPCs connected using VPC Peering
- D
A single VPC shared across all projects without host-service project separation
Show answer and explanation
Correct answer: B
Explanation
A Shared VPC setup allows an organization to centralize network control in the host project while enabling teams to manage resources in their respective service projects. This ensures a balance between centralized governance and decentralized resource ownership, making it the ideal choice for the given scenario.
- A. Incorrect.
Standalone VPCs for each project can lead to decentralized management, where each project has its own network configurations. This does not meet the requirement for centralized control.
- B. Correct.
A Shared VPC with host and service projects allows centralized control over network configurations while letting individual teams manage their own resources in service projects. This best meets the requirements.
- C. Incorrect.
Multiple standalone VPCs connected using VPC Peering do not provide centralized control over network configurations. Each VPC would still need to manage its own configurations independently.
- D. Incorrect.
A single VPC shared across all projects without host-service project separation does not allow for proper isolation of resources per project, which can lead to management and security challenges.