Google Professional Cloud Security Engineer Question 205
Select 1Google Cloud PlatformYou are setting up a Virtual Private Cloud (VPC) network in Google Cloud for a new web application. The application will have a front-end web server and a back-end database server. The web server must be accessible from the internet, while the database server should only be accessible internally within the VPC. Which of the following IP address configurations should you use to meet these requirements?
- A
Assign a public IP address to the web server and a private IP address to the database server.
- B
Assign a private IP address to both the web server and the database server.
- C
Assign a public IP address to both the web server and the database server.
- D
Assign a private IP address to the web server and configure Cloud NAT for internet access.
- E
Assign a public IP address to the database server and a private IP address to the web server.
Show answer and explanation
Correct answer: A
Explanation
When designing a secure and functional VPC network in Google Cloud, it is important to use public IP addresses only for resources that need to be accessible from the internet, such as a front-end web server. Private IP addresses should be used for internal resources, such as a back-end database server, to restrict access and enhance security. This ensures that publicly accessible resources are minimized and sensitive resources remain internal.
- A. Correct.
This is the correct configuration because the web server needs a public IP to be accessible from the internet, while the database server should remain internal with a private IP address for security.
- B. Incorrect.
This is incorrect because the web server would not be accessible from the internet without a public IP address.
- C. Incorrect.
This is incorrect because assigning a public IP to the database server would expose it to the internet, which is not secure or necessary.
- D. Incorrect.
This is incorrect because assigning only a private IP to the web server and relying on Cloud NAT would not make it accessible from the internet.
- E. Incorrect.
This is incorrect because the database server does not need a public IP address and exposing it to the internet would pose a security risk.