Google Professional Cloud Security Engineer Question 269
Select 4Google Cloud PlatformYour organization is using a Shared VPC to centralize network management across multiple Google Cloud projects. A new on-premises application requires private access to Google Cloud services (e.g., Cloud Storage) through the organization's Shared VPC. What steps should you take to ensure private connectivity between the on-premises application and Google Cloud services?
- A
Enable Private Google Access on the Shared VPC subnets that will route traffic to Google Cloud services.
- B
Set up a Cloud VPN or Cloud Interconnect to connect your on-premises network to the Shared VPC.
- C
Configure VPC Network Peering between the Shared VPC and the on-premises network.
- D
Ensure the DNS configuration allows on-premises hosts to resolve the private Google Cloud service domains.
- E
Enable Private Google Access for on-premises hosts in the Shared VPC settings.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To enable private connectivity between an on-premises application and Google Cloud services using a Shared VPC, you must first establish a private connection (using Cloud VPN or Cloud Interconnect). You also need to enable Private Google Access on the relevant Shared VPC subnets and configure Private Google Access for on-premises hosts. Additionally, proper DNS configuration ensures that on-premises hosts can resolve private Google service domains. VPC Network Peering is not relevant since Shared VPC already provides centralized networking.
- A. Correct.
Correct: Enabling Private Google Access on the Shared VPC subnets is necessary for the subnets to route traffic to Google Cloud services privately.
- B. Correct.
Correct: A Cloud VPN or Cloud Interconnect is required to establish private connectivity between the on-premises network and the Shared VPC.
- C. Incorrect.
Incorrect: VPC Network Peering is not applicable in this scenario because you are using a Shared VPC, which already provides centralized networking without peering.
- D. Correct.
Correct: Proper DNS configuration is required so that on-premises hosts can resolve private Google Cloud service domains (e.g., *.googleapis.com).
- E. Correct.
Correct: Enabling Private Google Access for on-premises hosts allows traffic from on-premises systems to reach Google Cloud services privately through the Shared VPC.