Google Professional Cloud Security Engineer Question 258
Select 3Google Cloud PlatformYour organization is deploying a hybrid cloud solution where sensitive data must remain on-premises, but the application hosted in Google Cloud needs real-time access to this data. To ensure secure and private communication between your on-premises environment and Google Cloud, which of the following steps should you take?
- A
Set up a Dedicated Interconnect or Partner Interconnect to establish private connectivity between your on-premises network and Google Cloud.
- B
Enable VPC peering between the on-premises network and Google Cloud to ensure private connectivity.
- C
Configure Cloud VPN with high-availability tunnels for encrypted communication between your on-premises network and Google Cloud.
- D
Ensure that private Google access is enabled for your on-premises network to allow access to Google Cloud services over private IP.
- E
Deploy a public IP address on your on-premises network to establish connectivity with Google Cloud.
Show answer and explanation
Correct answers: A, C, D
Explanation
To establish private connectivity between an on-premises network and Google Cloud, you can use Dedicated Interconnect or Partner Interconnect for direct private connections or Cloud VPN for encrypted communication over the public internet. Additionally, enabling private Google access ensures secure interaction with Google Cloud services without public internet exposure. VPC peering and public IP usage are not appropriate for this scenario.
- A. Correct.
Dedicated Interconnect or Partner Interconnect provides private, high-bandwidth, and low-latency connectivity between your on-premises network and Google Cloud. This is an essential step for establishing private connectivity.
- B. Incorrect.
VPC peering is used to connect two VPC networks, but it cannot be used to directly connect an on-premises environment to Google Cloud. This is incorrect for this scenario.
- C. Correct.
Cloud VPN is a suitable solution for encrypted communication over the public internet, and high-availability tunnels ensure reliability. This can be used to establish private connectivity for hybrid cloud setups.
- D. Correct.
Enabling private Google access ensures that on-premises systems can reach Google Cloud services over private IP without using the public internet. This is a critical step in securing private connectivity.
- E. Incorrect.
Using a public IP address for on-premises connectivity is not recommended as it exposes your network to potential security risks and contradicts the requirement for private connectivity.