Google Professional Cloud Security Engineer Question 260
Single answerGoogle Cloud PlatformYour organization wants to securely connect its on-premises data center to a Virtual Private Cloud (VPC) in Google Cloud while ensuring that all traffic remains private and does not traverse the public internet. Additionally, the solution must support high bandwidth and low latency for critical workloads. Which option would best meet these requirements?
- A
Use a VPN tunnel with Cloud VPN
- B
Use a Dedicated Interconnect connection
- C
Use a public IP address with managed instance groups
- D
Use Private Google Access with a Cloud NAT configuration
Show answer and explanation
Correct answer: B
Explanation
To securely connect an on-premises data center to a Google Cloud VPC while ensuring all traffic remains private and does not traverse the public internet, a Dedicated Interconnect is the best option. It provides a private, high-speed, low-latency physical connection, making it ideal for critical workloads. Other options either rely on the public internet or do not fully address the connectivity requirements.
- A. Incorrect.
Cloud VPN allows you to set up a secure connection between your on-premises data center and Google Cloud, but traffic still traverses the public internet. This does not meet the requirement of keeping all traffic private.
- B. Correct.
Dedicated Interconnect provides a private physical connection between your on-premises data center and Google Cloud. It ensures that traffic does not traverse the public internet and supports high bandwidth and low latency, meeting all the outlined requirements.
- C. Incorrect.
Using a public IP address with managed instance groups does not fulfill the requirement to keep traffic private, as it relies on public internet routing.
- D. Incorrect.
Private Google Access with Cloud NAT helps instances in private subnets reach Google APIs and services securely but does not provide direct private connectivity between your on-premises data center and Google Cloud.