Question

You need to set up a Cloud interconnect connection between your company's on-premises data center and VPC host network. You want to make sure that on-premises applications can only access Google APIs over the Cloud Interconnect and not through the public internet. You are required to only use APIs that are supported by VPC Service Controls to mitigate against exfiltration risk to non- supported APIs. How should you configure the network?

Accepted Answer

Use restricted googleapis.com to access Google APIs using a set of IP addresses only routable from within Google Cloud, which are advertised as routes over the Cloud Interconnect connection.

Answer

Enable Private Google Access on the regional subnets and global dynamic routing mode.

Answer

Set up a Private Service Connect endpoint IP address with the API bundle of "all-apis", which is advertised as a route over the Cloud interconnect connection.

Answer

Use private.googleapis.com to access Google APIs using a set of IP addresses only routable from within Google Cloud, which are advertised as routes over the connection.

You need to set up a Cloud interconnect connection between your company's on-premises data center and VPC host network. You want to make sure that…

Take the free CLOUD-SECURITY-ENGINEER practice test

Other CLOUD-SECURITY-ENGINEER practice questions