Google Professional Cloud Security Engineer Question 263
Single answerGoogle Cloud PlatformYour organization is planning to establish private connectivity between its on-premises data center and Google Cloud to securely access services such as Cloud Storage and BigQuery without exposing traffic to the public internet. Which solution should you implement to achieve this?
- A
Use Cloud VPN to establish an IPsec tunnel for secure connectivity.
- B
Use VPC Peering to directly connect the on-premises network with the Google Cloud VPC.
- C
Use Cloud Interconnect with Private Google Access to enable private connectivity to Google services.
- D
Use a public IP address and firewall rules to restrict access to Google services.
Show answer and explanation
Correct answer: C
Explanation
The correct solution is to use Cloud Interconnect with Private Google Access. Cloud Interconnect establishes a dedicated or partner connection between the on-premises data center and Google Cloud, while Private Google Access ensures that Google services like Cloud Storage and BigQuery are accessible privately without traversing the public internet.
- A. Incorrect.
Cloud VPN provides secure connectivity via IPsec tunnels but does not ensure private access to Google services like Cloud Storage or BigQuery. It is more suitable for general private network connectivity.
- B. Incorrect.
VPC Peering enables private communication between two VPCs but cannot directly connect an on-premises network to Google Cloud or provide private access to Google services.
- C. Correct.
Cloud Interconnect combined with Private Google Access allows private connectivity to Google services by extending the on-premises network to Google Cloud through a dedicated or partner connection.
- D. Incorrect.
Using a public IP address and firewall rules does not provide private connectivity. It exposes traffic to the public internet, which is not secure or aligned with the requirement.