Google Professional Data Engineer Question 78
Single answerGoogle Cloud PlatformYou are designing a data processing solution on Google Cloud that will process large volumes of data in a private environment. The solution involves Compute Engine instances and a Cloud Storage bucket in the same VPC. To ensure secure and high-performance communication between these resources, what networking approach should you use?
- A
Configure the Compute Engine instances to communicate with the Cloud Storage bucket over the public internet using HTTPS.
- B
Enable Private Google Access on the subnet where the Compute Engine instances are deployed.
- C
Set up a VPN connection between the Compute Engine instances and the Cloud Storage bucket.
- D
Use a Public IP address for the Compute Engine instances and configure a firewall rule to allow access to Cloud Storage.
Show answer and explanation
Correct answer: B
Explanation
Enabling Private Google Access allows Compute Engine instances in a VPC subnet to privately access Google services like Cloud Storage without routing traffic over the public internet. This ensures both security and high performance, making it the optimal solution in this scenario.
- A. Incorrect.
Using the public internet for communication introduces latency and security concerns. This is not an optimal solution for secure and high-performance communication within the same VPC.
- B. Correct.
Enabling Private Google Access allows resources in a VPC subnet to connect to Google APIs and services (like Cloud Storage) privately, without using the public internet. This is the recommended approach for secure and high-performance communication.
- C. Incorrect.
A VPN is unnecessary because both the Compute Engine instances and the Cloud Storage bucket are within the same VPC. A VPN would add unnecessary complexity and cost.
- D. Incorrect.
Using a public IP address for Compute Engine instances and configuring a firewall rule does not ensure private communication. Additionally, it exposes the instances to the public internet, which is not secure.