Google Professional Cloud Network Engineer Question 776
Single answerGoogle Cloud PlatformYour organization has deployed multiple projects in Google Cloud to separate environments (e.g., development, staging, and production). You are tasked with ensuring that network resources, such as VPCs and Cloud NAT, are isolated between projects, while still allowing centralized management of shared resources like a central logging system. Which approach should you take to achieve this?
- A
Create separate VPC networks in each project and use Shared VPC to connect them.
- B
Use project-scoped resources to separate VPC networks and configure network peering between the projects.
- C
Deploy all environments into a single project and use multiple VPCs to isolate the environments.
- D
Enable hierarchical firewalls to enforce network isolation and centralized management at the organization level.
Show answer and explanation
Correct answer: B
Explanation
Using project-scoped resources ensures that each environment (development, staging, production) has its own isolated network resources. This approach aligns with best practices for managing environments in Google Cloud by separating projects for isolation and using network peering only when communication between projects is required. Shared VPC and hierarchical firewalls serve different purposes and are not suitable for this scenario.
- A. Incorrect.
Shared VPC is used to share a single VPC across multiple projects, but this does not meet the requirement of isolating resources between projects. Additionally, it is not designed for achieving isolation between environments like development, staging, and production.
- B. Correct.
Using project-scoped resources ensures that each environment has its own VPC network and network resources, fulfilling the requirement for isolation. Network peering can be used to connect projects only when necessary, while maintaining separation.
- C. Incorrect.
Deploying everything into a single project contradicts the requirement of isolating resources between projects and is not a recommended practice for managing environments like development, staging, and production.
- D. Incorrect.
Hierarchical firewalls can help enforce security policies across the organization or folders, but they do not inherently provide network isolation or the centralized management of shared resources.