Google Professional Cloud Architect Exam - Topic 10 Question 79 Discussion

Actual exam question for Google's Professional Cloud Architect exam

Question #: 79
Topic #: 10

[All Professional Cloud Architect Questions]

Your company has a project in Google Cloud with three Virtual Private Clouds (VPCs). There is a Compute Engine instance on each VPC. Network subnets do not overlap and must remain separated. The network configuration is shown below.

Instance #1 is an exception and must communicate directly with both Instance #2 and Instance #3 via internal IPs. How should you accomplish this?

ACreate a cloud router to advertise subnet #2 and subnet #3 to subnet #1.

BAdd two additional NICs to Instance #1 with the following configuration:
* NIC1
VPC: VPC #2
SUBNETWORK: subnet #2
* NIC2
VPC: VPC #3
SUBNETWORK: subnet #3
Update firewall rules to enable traffic between instances.

CCreate two VPN tunnels via CloudVPN:
* 1 between VPC #1 and VPC #2.
* 1 between VPC #2 and VPC #3.
Update firewall rules to enable traffic between the instances.

DPeer all three VPCs:
* Peer VPC #1 with VPC #2.
* Peer VPC #2 with VPC #3.
Update firewall rules to enable traffic between the instances.

Show Suggested Answer

Suggested Answer: C

This option can help create an organization structure that allows developers to create projects, but prevents them from modifying production projects. Folders are containers for projects and other folders within Google Cloud organizations. Folders allow resources to be structured hierarchically and inherit policies from their parent resources. By creating folders under the organization resource named ''Development'' and ''Production'', you can organize your projects by environment and apply different policies to them. By granting all developers the Project Creator IAM role on the ''Development'' folder, you can allow them to create projects under that folder, but not under the ''Production'' folder. By moving the developer projects into the ''Development'' folder, you can ensure that they are subject to the policies set on that folder. By setting the policies for all projects on the organization, you can manage policies centrally and efficiently. By additionally setting the production policies on the ''Production'' folder, you can enforce more restrictive policies for production projects and prevent developers from modifying them. The other options are not optimal for this scenario, because they either create a second Google Workspace account and organization, which increases complexity and cost (A), or do not use folders to organize projects by environment, which makes it harder to manage policies and permissions (B, D). Reference:

https://cloud.google.com/resource-manager/docs/creating-managing-folders

https://cloud.google.com/architecture/framework/system-design

by Devorah at Apr 09, 2024, 05:28 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bette

3 months ago

I think VPN tunnels (Option C) would add unnecessary overhead.

upvoted 0 times

...

Gerald

3 months ago

Peering all three VPCs (Option D) could work too, but might complicate things.

upvoted 0 times

...

Lea

4 months ago

Wait, can you really add multiple NICs like that? Sounds risky.

upvoted 0 times

...

Billi

4 months ago

I agree, adding NICs is a straightforward solution!

upvoted 0 times

...

Judy

4 months ago

Option B seems like the best choice for direct communication.

upvoted 0 times

...

Gianna

4 months ago

I feel like the VPN tunnels option might be overkill for this scenario, but I can't recall the specifics of when to use them versus peering.

upvoted 0 times

...

Elfrieda

4 months ago

I practiced a question similar to this where we had to set up VPC peering. I wonder if peering all three VPCs would be the right choice here too.

upvoted 0 times

...

Jacki

5 months ago

I think creating a cloud router could work, but I’m not entirely clear on how it would handle the internal IPs between the instances.

upvoted 0 times

...

Idella

5 months ago

I remember something about using additional NICs for instances to allow communication across different VPCs, but I'm not sure if that's the best approach here.

upvoted 0 times

...

Martin

5 months ago

I've got this! Option D with VPC peering looks like the cleanest way to connect Instance #1 while maintaining the network separation. I'll just need to make sure the firewall rules are set up correctly.

upvoted 0 times

...

Maddie

5 months ago

Hmm, I'm a bit confused by the different VPC and subnet configurations. I'll need to make sure I understand the requirements and the implications of each solution before deciding.

upvoted 0 times

...

Salley

5 months ago

This seems like a tricky networking question. I'll need to carefully review the network configuration and think through the options to find the most efficient solution.

upvoted 0 times

...

Linn

5 months ago

Okay, let me see here. I think the key is to find a way to connect Instance #1 to the other two instances while keeping the subnets separate. Option B looks promising with the additional NICs, but I'll need to double-check the details.

upvoted 0 times

...

Lezlie

5 months ago

I'm pretty confident that the answer is A. Vlocity CPQ is designed to support the entire configure, price, and quote process for products, so that's the best fit for this question.

upvoted 0 times

...

Vanesa

5 months ago

I keep mixing up the numbers for HD calls versus standard calls. Maybe it's 500 for HD, but that feels too high?

upvoted 0 times

...

Peggie

5 months ago

Hmm, this is a tricky one. I'll need to think through the impact of adding a non-contributing predictor variable to the model.

upvoted 0 times

...

An

5 months ago

I'm not entirely sure, but I remember practicing something similar where we had to verify configurations without testing calls. Wasn't there something about trace logs too?

upvoted 0 times

...

Barney

10 months ago

The real question is, can Instance #1 communicate with the refrigerator in the break room? Now that's the kind of connectivity I'm looking for.

upvoted 0 times

Ciara

9 months ago

User 3: Or we could just take a break and walk to the break room to get our snacks.

upvoted 0 times

...

Roosevelt

9 months ago

User 2: Maybe we can set up a special network just for the refrigerator!

upvoted 0 times

...

Shayne

9 months ago

User 1: Haha, that would be convenient if Instance #1 could communicate with the refrigerator in the break room.

upvoted 0 times

...

Chandra

10 months ago

Option B is the way to go. Imagine trying to explain VPN tunnels or VPC peering to your boss. 'Yeah, we're going to make the network more complicated to fix a simple problem.' Nah, I'll stick with the NIC solution.

upvoted 0 times

Deane

9 months ago

Yeah, explaining VPN tunnels or VPC peering does sound more complicated.

upvoted 0 times

...

Tracie

9 months ago

I agree, adding NICs seems like the simplest way to go.

upvoted 0 times

...

Buddy

10 months ago

Option B is definitely the most straightforward solution.

upvoted 0 times

...

Della

10 months ago

Hmm, I'm not sure why anyone would create a cloud router to advertise subnets in Option A. Seems like a lot of extra work when you can just use additional NICs.

upvoted 0 times