Google Professional Cloud Security Engineer Question 474
Select 4Google Cloud PlatformYour organization is migrating a highly sensitive application to Google Cloud and needs to ensure compliance with regulatory requirements while optimizing resources. The application requires secure networking, high-speed data access, and temporary storage for processing intermediate results. Which combination of Google Cloud services and configurations should you recommend to meet these requirements?
- A
Use Virtual Private Cloud (VPC) with private IPs and firewall rules to secure the network.
- B
Store intermediate results in Cloud Storage with the 'multi-regional' storage class for faster data access.
- C
Leverage Filestore for high-performance file storage and data sharing between compute instances.
- D
Enable VPC Service Controls to restrict data access and mitigate data exfiltration risks.
- E
Use local SSDs attached to Compute Engine instances for high-speed temporary storage.
Show answer and explanation
Correct answers: A, C, D, E
Explanation
The correct combination of services and configurations ensures that the application meets its technical requirements while adhering to security and compliance standards. VPC with private IPs secures the network, Filestore provides high-performance shared storage, local SSDs handle fast temporary storage, and VPC Service Controls prevent unauthorized data access. Cloud Storage with a 'multi-regional' storage class is not appropriate for this use case as it prioritizes availability over performance.
- A. Correct.
Correct: Using Virtual Private Cloud (VPC) with private IPs and firewall rules ensures secure network communication for the application, which is essential for regulatory compliance and data protection.
- B. Incorrect.
Incorrect: The 'multi-regional' storage class in Cloud Storage is optimized for availability rather than performance and is not suitable for temporary or high-speed data access.
- C. Correct.
Correct: Filestore provides high-performance file storage and is ideal for sharing data between compute resources, aligning with the application's need for high-speed data access.
- D. Correct.
Correct: Enabling VPC Service Controls adds an additional layer of security to prevent unauthorized data access and exfiltration, critical for sensitive applications.
- E. Correct.
Correct: Local SSDs offer extremely high IOPS and low latency, making them suitable for temporary storage of intermediate results during processing.