1.1 Designing the Overall Resource Hierarchy for an Organization PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company wants its applications in a VPC to access a Google-managed service (e.g., Cloud SQL) privately, without using public IP addresses or going through the internet. They also want to avoid setting up a separate VPC peering connection for each service. What should they use?

   • APrivate Service Connect
   • BVPC Network Peering
   • CCloud VPN
   • DShared VPC
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary purpose of Shared VPC in Google Cloud?

   • ATo allow a project to access Google-managed services like Cloud Storage
   • BTo allow multiple projects to use a common VPC network, enabling centralized network management and secure communication between resources in different projects
   • CTo connect two VPC networks using a VPN tunnel
   • DTo enable VPC Network Peering between two projects
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which Google Cloud feature is used to route logs from one project to another?

   • ALog sinks
   • BCloud Functions
   • CIAM roles
   • DVPC Network Peering
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   In a Shared VPC setup, what is the role of the host project?

   • AIt is the project that uses the shared network to deploy resources
   • BIt contains the shared VPC network and its subnets, and it is responsible for managing network resources
   • CIt is the project that hosts the organization's DNS servers
   • DIt is the project that provides billing for all other projects
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is service account impersonation?

   • AAllowing a user or service to temporarily act as a service account to perform actions with its permissions
   • BCreating a new service account that mimics the permissions of an existing one
   • CDeleting a service account and recreating it with the same name
   • DSharing the service account key with another user
   Reveal Solution Discussion Select an answer first