Google Professional Cloud Security Engineer Question 261
Single answerGoogle Cloud PlatformYour company needs to securely connect its on-premises environment to Google Cloud to transfer sensitive data without exposing it to the public internet. The solution must ensure low latency and high availability. Which of the following options should you implement?
- A
Set up a VPN over the public internet
- B
Configure a Dedicated Interconnect
- C
Use Cloud NAT to route traffic through private IPs
- D
Establish a Partner Interconnect through a third-party service provider
Show answer and explanation
Correct answer: B
Explanation
Dedicated Interconnect is the ideal solution for establishing private connectivity between on-premises and Google Cloud when the requirements include secure data transfer, low latency, and high availability. While other options like VPN or Partner Interconnect may provide private connectivity, they do not meet all the specified requirements as effectively as Dedicated Interconnect.
- A. Incorrect.
Setting up a VPN over the public internet will expose the connection to the internet, which is not ideal for transferring sensitive data. While VPN provides encryption, it does not meet the low latency requirement.
- B. Correct.
Configuring a Dedicated Interconnect provides a private, high-bandwidth, low-latency connection between your on-premises network and Google Cloud. This is the most secure and reliable option for transferring sensitive data.
- C. Incorrect.
Cloud NAT is used for outbound internet access without exposing private VM instances, but it does not establish private connectivity between on-premises and Google Cloud.
- D. Incorrect.
Partner Interconnect is a valid option for private connectivity, but it relies on a third-party provider and may not meet the low latency or high availability requirements as effectively as Dedicated Interconnect.