CLOUD-SECURITY-ENGINEER practice question 34 of 35

A company is running workloads in a dedicated server room. They must only be accessed from within the private company network. You need to connect to these workloads from Compute Engine instances within a Google Cloud Platform project. Which two approaches can you take to meet the requirements? (Choose two.)

Full set: 317 questions

Answer options

A: Configure the project with Cloud VPN. Correct answer

B: Configure the project with Shared VPC.

C: Configure the project with Cloud Interconnect. Correct answer

D: Configure the project with VPC peering.

E: Configure all Compute Engine instances with Private Access.

Correct Answer:

A. Configure the project with Cloud VPN.; C. Configure the project with Cloud Interconnect.

Explanation

To connect a private on-premises network to a Google Cloud VPC for private communication, there are two primary hybrid connectivity options. Cloud VPN (A) establishes a secure IPsec VPN tunnel over the public internet, which is a standard and cost-effective method. Cloud Interconnect (C) provides a dedicated, private, high-bandwidth physical connection between the on-premises network and Google's network. Both solutions extend the private network space, allowing Compute Engine instances to access on-premises workloads securely and privately.

Why Incorrect

B. Shared VPC is a feature for organizing resources and sharing a common VPC network across multiple projects within Google Cloud, not for connecting to on-premises networks.
D. VPC Network Peering connects two separate Google Cloud VPC networks. It does not provide connectivity to an external, on-premises environment.
E. Private Google Access allows VMs without external IPs to reach Google APIs and services. It does not enable connectivity from GCP to an on-premises network.

References

1. Google Cloud Documentation

"Choosing a Network Connectivity product"

Section: "Connecting to Google Cloud from on-premises". This page presents a decision tree where the first question is "Do you need to access VPC networks from on-premises systems?". The two main paths from there lead to Cloud Interconnect and Cloud VPN.

2. Google Cloud Documentation

"Cloud VPN overview". It states

"Cloud VPN securely connects your on-premises network to your Google Cloud Virtual Private Cloud (VPC) network through an IPsec VPN connection."

3. Google Cloud Documentation

"Cloud Interconnect overview". It states

"Cloud Interconnect extends your on-premises network to Google's network through a highly available

low latency connection."

Keep practicing

Take the free CLOUD-SECURITY-ENGINEER practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test