Google Professional Cloud Network Engineer Question 86
Single answerGoogle Cloud PlatformYour organization leverages Google Cloud's managed services, such as Cloud SQL and Cloud Storage, while maintaining a private IP networking strategy. You are tasked with ensuring that traffic between your on-premises network and these managed services does not traverse the public internet. Which solution will allow you to achieve this goal?
- A
Use Private Google Access and configure a Cloud Interconnect or VPN between your on-premises network and Google Cloud.
- B
Configure a public IP address for the managed services and route traffic through a firewall that blocks public egress.
- C
Enable VPC Peering between your on-premises network and Google Cloud's managed services.
- D
Deploy a NAT gateway in your VPC to route traffic to Google Cloud's managed services privately.
Show answer and explanation
Correct answer: A
Explanation
To ensure traffic between your on-premises network and Google Cloud's managed services does not traverse the public internet, you need to use Private Google Access in combination with a Cloud Interconnect or VPN. This setup allows private IP connectivity to Google Cloud's managed services while maintaining a secure and private networking strategy.
- A. Correct.
Correct. Private Google Access ensures that resources in your on-premises or VPC network can access Google Cloud managed services using private IPs, avoiding the public internet. A Cloud Interconnect or VPN is required to securely route traffic from on-premises to Google Cloud.
- B. Incorrect.
Incorrect. Configuring a public IP for managed services and using a firewall does not prevent traffic from traversing the public internet. This approach does not align with the private IP networking strategy.
- C. Incorrect.
Incorrect. VPC Peering connects two VPC networks but does not provide private access to Google Cloud managed services from on-premises networks.
- D. Incorrect.
Incorrect. A NAT gateway facilitates outbound internet access for private resources in your VPC, but it does not enable private access to Google Cloud managed services.