2.3 Establishing Private Connectivity PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A company needs a dedicated, private connection between its on-premises data center and Google Cloud with high bandwidth and low latency. Which service should they use?

   • APrivate Service Connect
   • BCloud Interconnect
   • CCloud VPN
   • DVPC peering
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company wants to access a specific Google API (e.g., Google Cloud Storage) from their VPC using a private IP address, without using the public internet. They also want to ensure that the traffic does not leave the Google Cloud network. What should they configure?

   • AEnable Private Google Access on the subnet.
   • BUse Cloud VPN to connect to the Google API.
   • CConfigure a Cloud NAT gateway to access the Google API.
   • DCreate a Private Service Connect endpoint and connect it to the Google API service.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a key characteristic of VPC peering between two VPC networks?

   • AThe peered networks can have overlapping CIDR ranges
   • BThe peered networks must be in the same project
   • CThe peered networks must be in the same region
   • DThe peered networks exchange routes and can communicate using internal IP addresses
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Where is Private Google Access for VPC enabled?

   • AOn the VM instance
   • BOn the firewall rule
   • COn the subnet
   • DOn the VPC network
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company has an on-premises data center connected to Google Cloud via HA VPN. They want on-premises servers to access Google Cloud APIs privately. They have configured their on-premises DNS to resolve Google API hostnames to the private IP range 199.36.153.8/30. However, they are still seeing traffic to Google APIs going over the public internet. What is the most likely cause?

   • AThe HA VPN tunnel is not advertising the 199.36.153.8/30 range to the on-premises network.
   • BThe on-premises DNS server is not configured to use the correct DNS resolver.
   • CThe on-premises firewall is blocking traffic to the 199.36.153.8/30 range.
   • DPrivate Google Access is not enabled on the VPC subnet.
   Reveal Solution Discussion Select an answer first