2.3 Establishing Private Connectivity PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company has two VPCs in the same project: VPC-A (10.0.0.0/16) and VPC-B (10.0.0.0/16). They want to establish private connectivity between these two VPCs. They also have an on-premises network (192.168.0.0/16) that needs to reach resources in both VPCs. The company wants to minimize the number of connections and administrative overhead. What should they do?

   • ACreate a VPC peering connection between VPC-A and VPC-B, and set up a separate HA VPN tunnel from on-premises to each VPC.
   • BCreate a VPC peering connection between VPC-A and VPC-B, and use a single HA VPN tunnel from on-premises to VPC-A, relying on peering for VPC-B access.
   • CUse Cloud VPN to connect VPC-A and VPC-B, and use Cloud Interconnect for on-premises connectivity.
   • DCreate a Shared VPC and move all resources from VPC-A and VPC-B into it, then set up a single HA VPN tunnel from on-premises to the Shared VPC.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which type of Cloud Interconnect requires the customer to arrange a physical connection at a Google Cloud colocation facility?

   • AHA VPN
   • BCloud NAT
   • CDedicated Interconnect
   • DPartner Interconnect
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company requires a dedicated, low-latency, and highly available connection between its on-premises data center and Google Cloud. They have a colocation facility that is already a partner in Google's Cloud Interconnect program. They want to avoid the cost and complexity of a dedicated physical connection. What should they use?

   • AHA VPN over the public internet.
   • BDedicated Interconnect with a 10 Gbps connection.
   • CA single VPN tunnel with a 99.99% SLA.
   • DPartner Interconnect through the existing colocation provider.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a key requirement for using Restricted Google Access?

   • AThe network must have a public IP address
   • BThe network must be connected via Cloud Interconnect
   • CThe network must use the restricted.googleapis.com domain
   • DThe network must be in the same region as the API
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has a VPC with instances that have no external IP addresses. These instances need to access the internet to download security patches. The security team wants to ensure that all outbound traffic is logged and that the source IP addresses are consistent for auditing purposes. What should they configure?

   • AEnable Private Google Access on the subnet.
   • BUse VPC peering with a network that has internet access.
   • CCreate a Cloud NAT gateway and configure it for the subnet.
   • DAssign external IP addresses to the instances.
   Reveal Solution Discussion Select an answer first