Google Professional Cloud Security Engineer Question 259
Single answerGoogle Cloud PlatformYour company wants to securely connect its on-premises data center to a Virtual Private Cloud (VPC) hosted in Google Cloud. The connection must ensure private communication without exposing traffic to the public internet. Which approach should you use to establish private connectivity?
- A
Use a VPN tunnel over the public internet.
- B
Configure Cloud Interconnect with a Dedicated Interconnect or Partner Interconnect.
- C
Set up a public IP for your resources in the VPC and use HTTPS to encrypt traffic.
- D
Enable VPC Peering between the on-premises network and the Google Cloud VPC.
Show answer and explanation
Correct answer: B
Explanation
The best option for establishing private connectivity between an on-premises data center and a Google Cloud VPC is to use Cloud Interconnect. This enables a direct, private connection that bypasses the public internet, providing enhanced security and reliability. Other options either fail to meet the requirement of avoiding public internet exposure or are not applicable to hybrid connectivity.
- A. Incorrect.
VPN tunnels use the public internet to transmit data, even though the traffic is encrypted. This does not fully meet the requirement to avoid exposing traffic to the public internet.
- B. Correct.
Cloud Interconnect (either Dedicated or Partner) provides private connectivity by establishing a direct connection between your on-premises network and Google Cloud VPC, bypassing the public internet. This satisfies the requirement for private communication.
- C. Incorrect.
Using public IPs and encrypting traffic with HTTPS does not ensure private connectivity, as the traffic still traverses the public internet.
- D. Incorrect.
VPC Peering is used to connect two VPCs, but it cannot connect an on-premises network to a Google Cloud VPC. Therefore, it is not suitable for this scenario.