Google Professional Cloud Network Engineer Question 70
Single answerGoogle Cloud PlatformYour organization needs to design a network infrastructure on Google Cloud for multiple projects belonging to different departments. Each department requires isolation between their resources but needs shared access to a centralized logging and monitoring environment. Additionally, you want to minimize administrative overhead for network management. Which design approach should you choose?
- A
Use a single standalone VPC and segregate resources using subnets for each department.
- B
Create a Shared VPC and connect each department's project as a service project.
- C
Set up a separate standalone VPC for each department and use VPC peering to connect them to a centralized logging and monitoring environment.
- D
Deploy multiple Shared VPCs, one for each department, to ensure isolation and link them with VPC peering.
Show answer and explanation
Correct answer: B
Explanation
The Shared VPC architecture allows you to centralize network management in a host project while attaching service projects for each department, ensuring resource isolation and shared access to centralized services like logging and monitoring. This approach optimally meets the requirements of the scenario while minimizing administrative overhead.
- A. Incorrect.
Using a single standalone VPC with subnets for each department does not provide sufficient isolation between departments. It also makes it challenging to meet the requirement for shared access to a centralized logging and monitoring environment.
- B. Correct.
A Shared VPC allows you to centralize network management and logging while providing resource isolation by attaching separate service projects for each department. This approach minimizes the administrative overhead and satisfies the requirements.
- C. Incorrect.
Creating separate standalone VPCs for each department and using VPC peering to connect them increases administrative complexity. It does not align with the requirement to minimize overhead for network management.
- D. Incorrect.
Deploying multiple Shared VPCs for each department increases complexity and defeats the purpose of centralizing network management. It also adds unnecessary administrative overhead.