Google Professional Data Engineer Question 77
Select 2Google Cloud PlatformYou are designing a data pipeline on Google Cloud that processes sensitive customer data. The pipeline spans multiple VPC networks and regions. To ensure secure communication between services in these networks while avoiding the public internet, which networking setup should you implement?
- A
Use VPC Peering to connect the VPC networks and ensure private communication.
- B
Enable Private Google Access to allow services to communicate securely.
- C
Use VPN tunnels to connect the VPC networks across regions.
- D
Implement Cloud Interconnect for hybrid connectivity with private IPs.
- E
Configure Shared VPC to centralize networking and security policies.
Show answer and explanation
Correct answers: A, E
Explanation
To ensure secure communication between services in multiple VPC networks and regions within Google Cloud, VPC Peering is a straightforward solution that allows private communication without using the public internet. Additionally, Shared VPC centralizes networking and security policies, making it easier to manage permissions and ensure compliance with security requirements. Both options address the requirements of the scenario effectively.
- A. Correct.
VPC Peering allows private communication between VPC networks without traversing the public internet, making it a suitable choice for secure communication.
- B. Incorrect.
Private Google Access is used to allow resources in a VPC to access Google APIs and services without using external IPs, but it does not facilitate inter-VPC communication.
- C. Incorrect.
VPN tunnels are typically used for secure communication between on-premises and Google Cloud or across geographically distributed networks but are not necessary for VPC-to-VPC communication within Google Cloud.
- D. Incorrect.
Cloud Interconnect is designed for hybrid connectivity between on-premises and Google Cloud but does not directly address VPC-to-VPC communication.
- E. Correct.
Shared VPC allows centralizing networking and security policies across multiple projects, enabling secure communication and uniform policy enforcement for all connected resources.