Google Professional Cloud Security Engineer Question 267
Select 3Google Cloud PlatformYour organization has an on-premises data center that needs access to Google Cloud services such as Cloud Storage and BigQuery without traversing the public internet. At the same time, you need to ensure secure communication between multiple Google Cloud projects within your organization. Which combination of configurations should you implement to achieve this setup?
- A
Configure Private Google Access for on-premises hosts to enable private connectivity to Google APIs and services.
- B
Enable VPC Peering between all Google Cloud projects to ensure private communication across projects.
- C
Set up a Shared VPC and attach the Google Cloud projects to the host project for secure inter-project communication.
- D
Configure Cloud VPN or Cloud Interconnect to establish secure connectivity between the on-premises data center and Google Cloud.
- E
Enable Public Google Access on all VPC networks to simplify access to Google APIs and services.
Show answer and explanation
Correct answers: A, C, D
Explanation
To meet the requirements of private connectivity and secure communication, you need to configure Private Google Access for on-premises hosts to access Google APIs and services without using the public internet. For secure communication between Google Cloud projects, Shared VPC is the optimal choice as it centralizes networking and security management. Finally, Cloud VPN or Cloud Interconnect is necessary to establish a secure and private connection between the on-premises data center and Google Cloud.
- A. Correct.
Correct. Private Google Access for on-premises hosts allows on-premises systems to access Google APIs and services privately without using the public internet, meeting the requirement for secure access to Cloud Storage and BigQuery.
- B. Incorrect.
Incorrect. While VPC Peering enables private communication between VPC networks, it is not the best solution for managing multiple projects within the same organization. Shared VPC is more suitable for this use case.
- C. Correct.
Correct. Shared VPC allows multiple projects to connect to a common host VPC network, ensuring secure and centralized communication across projects.
- D. Correct.
Correct. Cloud VPN or Cloud Interconnect is required to establish secure and private connectivity between the on-premises data center and Google Cloud.
- E. Incorrect.
Incorrect. Enabling Public Google Access would expose traffic to the public internet, which violates the requirement for private connectivity and security.