Google Professional Cloud Security Engineer Question 262
Single answerGoogle Cloud PlatformYour organization needs to securely connect its on-premises data center to a Google Cloud VPC network while ensuring that no traffic traverses the public internet. Which connectivity option should you choose to fulfill this requirement?
- A
Cloud VPN using public IPs
- B
Cloud Interconnect with a Dedicated Interconnect
- C
Cloud NAT to route traffic securely
- D
Direct Peering between your on-premises network and Google
Show answer and explanation
Correct answer: B
Explanation
To meet the requirement of securely connecting an on-premises data center to a Google Cloud VPC without traversing the public internet, Cloud Interconnect with a Dedicated Interconnect is the best option. It provides a private, high-bandwidth, and reliable connection directly to Google Cloud, ensuring compliance with the stated requirement.
- A. Incorrect.
Cloud VPN using public IPs enables encrypted connectivity but may traverse the public internet, which does not meet the requirement of avoiding public internet traffic.
- B. Correct.
Cloud Interconnect with a Dedicated Interconnect provides a private, high-bandwidth connection directly between your on-premises environment and Google Cloud, ensuring no traffic traverses the public internet.
- C. Incorrect.
Cloud NAT is used for outbound connectivity without needing external IP addresses, but it does not provide private connectivity for on-premises-to-Google Cloud communication.
- D. Incorrect.
Direct Peering establishes a connection between your on-premises network and Google's network, but it is not as secure or private as Cloud Interconnect and may not avoid public internet pathways depending on the configuration.