Google Professional Cloud Security Engineer Question 207
Select 2Google Cloud PlatformYou are designing a Google Cloud solution for a company that wants to deploy a web application accessible to users globally. The application needs to connect securely to an internal database that should not be publicly accessible. How should you configure the IP addressing to meet these requirements?
- A
Assign a public IP address to the web server and a private IP address to the database.
- B
Assign a private IP address to the web server and a public IP address to the database.
- C
Use a private IP address for both the web server and the database, and set up a Cloud VPN for external access.
- D
Assign a public IP address to the web server and use a private IP address for the database, configuring a VPC network for secure internal communication.
- E
Use only public IP addresses for both the web server and the database for global accessibility.
Show answer and explanation
Correct answers: A, D
Explanation
To meet the requirements, the web server must have a public IP address to be accessible globally, while the internal database should use a private IP address to remain secure and inaccessible from the public internet. Configuring a VPC ensures secure communication between the web server and the database. This approach adheres to Google Cloud's best practices for IP addressing and security.
- A. Correct.
Correct: Assigning a public IP address to the web server allows global users to access it, while using a private IP address for the database ensures it remains internal and secure.
- B. Incorrect.
Incorrect: Assigning a private IP to the web server would block global user access, and using a public IP for the database would expose it to the internet, violating security best practices.
- C. Incorrect.
Incorrect: Using private IPs for both the web server and the database would block global user access to the application unless additional networking (e.g., a VPN) is configured, which is unnecessary for this scenario.
- D. Correct.
Correct: Assigning a public IP to the web server ensures global accessibility, while using a private IP for the database and configuring secure VPC communication aligns with Google Cloud security best practices.
- E. Incorrect.
Incorrect: Using public IPs for both the web server and the database would expose the database to the public internet, creating a significant security risk.