Google Professional Cloud Security Engineer Question 204
Select 2Google Cloud PlatformYou are designing a Google Cloud VPC for a multi-tier application. The application consists of a web tier that must be accessible to users on the internet and a database tier that should only be accessible from within the VPC. Which of the following configurations ensures proper IP addressing for this setup?
- A
Assign public IP addresses to instances in the web tier and private IP addresses to instances in the database tier.
- B
Assign private IP addresses to both the web tier and database tier, and use a Cloud NAT for internet access.
- C
Use private IP addresses for the web tier and database tier and configure an external load balancer to expose the web tier to the internet.
- D
Assign public IP addresses to both the web tier and the database tier for easier management and connectivity.
- E
Assign private IP addresses to the database tier and use a public IP address for the web tier, exposed via an external load balancer.
Show answer and explanation
Correct answers: A, E
Explanation
In Google Cloud, public IP addresses are used to make resources accessible over the internet, while private IP addresses are used for internal communication within a VPC. For a multi-tier application, the web tier typically requires public IPs or an external load balancer to handle internet traffic, while the database tier should use private IPs to remain secure and isolated. Configurations that expose the database tier to the internet or fail to provide internet access to the web tier are incorrect.
- A. Correct.
Correct: The web tier needs public IP addresses for internet accessibility, while the database tier should remain isolated within the VPC and use private IP addresses for security.
- B. Incorrect.
Incorrect: Using private IP addresses for the web tier without an external load balancer will not make it accessible to internet users.
- C. Incorrect.
Incorrect: While private IP addresses improve security, an external load balancer alone cannot expose the web tier to the internet without public IPs.
- D. Incorrect.
Incorrect: Assigning public IP addresses to both tiers compromises the security of the database and is not a best practice for securing sensitive data.
- E. Correct.
Correct: This setup ensures that the database tier remains private for security, while the web tier is exposed to the internet via an external load balancer using a public IP.