Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Associate Cloud Engineer Exam - Topic 5 Question 31 Discussion

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?
B) Create the instance with Private Google Access enabled.
A) Create the instance without a public IP address.
C) Create a deny-all egress firewall rule on the VPC network.
D) Create a route on the VPC to route all traffic to the instance over the VPN tunnel. Get private access to Google services, such as storage, big data, analytics, or machine learning, without having to give your service a public IP address. Explanation:

Google Associate Cloud Engineer Exam - Topic 5 Question 31 Discussion

Actual exam question for Google's Associate Cloud Engineer exam
Question #: 31
Topic #: 5
[All Associate Cloud Engineer Questions]

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: B

https://cloud.google.com/vpc

by Reita at May 05, 2022, 06:37 PM

Limited Time Offer

25%

Off

Get Premium Associate Cloud Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Socorro
7 months ago
Wait, can you really access Google services without a public IP?
upvoted 0 times
...
Pansy
7 months ago
Definitely need to route traffic over the VPN for security.
upvoted 0 times
...
Walton
8 months ago
A deny-all egress rule sounds a bit extreme, right?
upvoted 0 times
...
Matthew
8 months ago
I think enabling Private Google Access is a good move too.
upvoted 0 times
...
Tegan
8 months ago
Just create the instance without a public IP!
upvoted 0 times
...
Gerald
8 months ago
I recall that routing traffic over the VPN is crucial for secure connections, so option D might be the right answer, but I’m not sure if it fully addresses the public traffic concern.
upvoted 0 times
...
Gearldine
8 months ago
I feel like we practiced a question similar to this where firewall rules were involved. Option C could be a good choice, but I’m not completely confident.
upvoted 0 times
...
Nada
8 months ago
I'm not entirely sure, but I remember something about Private Google Access being important for accessing Google services without a public IP. Maybe option B is relevant?
upvoted 0 times
...
Abraham
8 months ago
I think option A makes the most sense since creating the instance without a public IP should prevent any public Internet traffic.
upvoted 0 times
...
Annice
8 months ago
I'm a bit confused by this question. The options don't seem to clearly define what an imaging and printing assessment is. I'll have to guess and go with option B, but I'm not totally confident in that.
upvoted 0 times
...
Hobert
8 months ago
I'm not too familiar with SAML on the Citrix ADC. I'll need to read through the question a few times and try to remember the key SAML entities.
upvoted 0 times
...
Fernanda
8 months ago
Hmm, I'm a bit unsure about this one. The scenario mentions the URL is blank, so I'll need to carefully review the options to determine the correct URL to enter.
upvoted 0 times
...
Yan
8 months ago
I remember practicing questions like this before, and I think it could be a Bridge Domain, but I'm not 100% confident.
upvoted 0 times
...

Save Cancel