2.3 Establishing Private Connectivity PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a Shared VPC setup, which project is responsible for managing the shared VPC network and its subnets?

   • ANetwork project
   • BHost project
   • COrganization project
   • DService project
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A company wants to connect its on-premises data center to a Google Cloud VPC using an encrypted connection over the public internet. Which Google Cloud service provides this?

   • ACloud NAT
   • BCloud Interconnect
   • CVPC peering
   • DHA VPN
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A company wants to access a Google API (e.g., Google Cloud Storage) privately from their VPC using internal IP addresses. Which service enables this?

   • AVPC peering
   • BPrivate Service Connect
   • CCloud NAT
   • DCloud Interconnect
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A security engineer needs to allow multiple projects in an organization to share a common VPC network for private communication. Which Google Cloud feature should they use?

   • ACloud NAT
   • BVPC peering
   • CShared VPC
   • DPrivate Service Connect
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company wants to restrict access to Google Cloud APIs so that only traffic from their on-premises network (connected via HA VPN) and their VPC is allowed. They have enabled Private Google Access on their VPC subnet and configured on-premises DNS to use the restricted Google Access IP range (199.36.153.4/30). What else must they do to ensure that only approved networks can access Google APIs?

   • AUse Private Service Connect to create a private endpoint for each Google API.
   • BConfigure the on-premises firewall to block traffic to Google APIs from non-approved networks.
   • CEnable Private Google Access on the on-premises network.
   • DCreate firewall rules in the VPC that allow traffic to 199.36.153.4/30 only from the VPC subnets and the on-premises network.
   Reveal Solution Discussion Select an answer first