Google Professional Cloud Security Engineer Question 265
Select 3Google Cloud PlatformYour organization has a requirement to allow on-premises servers to privately connect to Google Cloud services such as BigQuery and Cloud Storage over a dedicated interconnect. The on-premises network is connected to Google Cloud through Cloud Interconnect. What steps should you take to ensure this private connectivity is enabled?
- A
Enable Private Google Access for on-premises hosts in the VPC network.
- B
Configure a custom DNS zone that resolves Google APIs and services to private IP addresses.
- C
Create a VPC peering connection between the on-premises network and the Google Cloud VPC network.
- D
Update the on-premises network routing to send traffic to Google Cloud private services through the Cloud Interconnect.
- E
Enable Shared VPC and assign the host project to manage private connectivity.
Show answer and explanation
Correct answers: A, B, D
Explanation
To enable private connectivity for on-premises hosts to Google Cloud services, you need to configure Private Google Access for on-premises hosts, ensure proper DNS resolution of Google APIs and services to private IPs, and update on-premises routing to direct traffic through the Cloud Interconnect. VPC peering and Shared VPC are not applicable in this scenario as they address different types of connectivity requirements.
- A. Correct.
Correct. Enabling Private Google Access for on-premises hosts allows on-premises systems to access Google APIs and services using private IP addresses.
- B. Correct.
Correct. Configuring a custom DNS zone ensures that on-premises systems can resolve Google APIs and services to private IPs.
- C. Incorrect.
Incorrect. VPC peering is used for connecting two VPC networks, not for connecting an on-premises network to a Google Cloud VPC.
- D. Correct.
Correct. Updating the on-premises routing ensures that traffic to Google Cloud private services is properly routed through the Cloud Interconnect.
- E. Incorrect.
Incorrect. Shared VPC is used for sharing VPC resources across Google Cloud projects, not for enabling private connectivity for on-premises networks.