Google Professional Cloud Security Engineer Question 208
Single answerGoogle Cloud PlatformYour organization has created a new Google Cloud Virtual Private Cloud (VPC) to host an application. The application needs to communicate with a partner's on-premises system over a secure VPN tunnel. To ensure proper configuration, you need to assign IP addresses to the application's Compute Engine instances in the VPC. Which type of IP addressing should you use to ensure the instances can securely communicate with the on-premises system while adhering to best practices?
- A
Private IP addresses within the RFC 1918 range
- B
Public IP addresses to ensure global accessibility
- C
Private IP addresses outside of the RFC 1918 range
- D
Ephemeral public IP addresses
Show answer and explanation
Correct answer: A
Explanation
To ensure secure communication over a VPN tunnel between the VPC and the on-premises system, private IP addresses within the RFC 1918 range should be used. This ensures that the addresses are non-routable over the public internet and suitable for private networking. Using public or ephemeral IP addresses would compromise security or create unnecessary exposure, while private IP addresses outside RFC 1918 are not standard and could cause routing inconsistencies.
- A. Correct.
Private IP addresses within the RFC 1918 range are suitable for secure internal communication and can be routed through a VPN tunnel. This adheres to best practices for secure connectivity.
- B. Incorrect.
Public IP addresses are not recommended for communication over a secure VPN tunnel, as it exposes the systems to the internet unnecessarily.
- C. Incorrect.
Private IP addresses outside of the RFC 1918 range are not commonly used for secure internal communication and may lead to routing issues.
- D. Incorrect.
Ephemeral public IP addresses are temporary and not suitable for persistent secure communication with on-premises systems.