Google Professional Cloud Architect Exam - Topic 8 Question 58 Discussion

Actual exam question for Google's Professional Cloud Architect exam

Question #: 58
Topic #: 8

[All Professional Cloud Architect Questions]

You are configuring the cloud network architecture for a newly created project m Google Cloud that will host applications in Compote Engine Compute Engine virtual machine instances will be created in two different subnets (sub-a and sub-b) within a single region

* Instances in sub-a win have public IP addresses

* Instances in sub-b will have only private IP addresses

To download updated packages, instances must connect to a public repository outside the boundaries of Google Cloud You need to allow sub-b to access the external repository. What should you do?

AEnable Private Google Access on sub-b

BConfigure Cloud NAT and select sub b m the NAT mapping section

CConfigure a bastion host instance in sub a to connect to instances in sub-b

DEnable Identity Aware Proxy for TCP forwarding for instances in sub-b

Show Suggested Answer

Suggested Answer: B

by Annmarie at Oct 17, 2022, 12:57 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Maira

4 months ago

Totally agree with B, it's the most efficient solution!

upvoted 0 times

...

Jacquelyne

4 months ago

Wait, D? That sounds complicated for just accessing a repo!

upvoted 0 times

...

Ellsworth

4 months ago

C seems unnecessary for this setup.

upvoted 0 times

...

Marti

4 months ago

I think A could work too, but not sure.

upvoted 0 times

...

Louvenia

4 months ago

B is the way to go for NAT access.

upvoted 0 times

...

Jacklyn

5 months ago

I vaguely recall something about bastion hosts, but I don't think that's the best approach for this situation since we need direct internet access for sub-b.

upvoted 0 times

...

Laurena

5 months ago

I practiced a similar question where we had to allow private instances to reach out to the internet, and I think configuring Cloud NAT was the solution there too.

upvoted 0 times

...

Renea

5 months ago

I'm not entirely sure, but I feel like enabling Private Google Access could be relevant for accessing Google services, not external repositories.

upvoted 0 times

...

Rozella

5 months ago

I remember discussing how Cloud NAT can help private instances access the internet, so I think option B might be the right choice.

upvoted 0 times

...

Bettyann

5 months ago

Hmm, I'm not totally sure about this one. I know financial dimensions are involved, but I'm not confident about the other component.

upvoted 0 times

...

Lura

5 months ago

Hmm, I'm not totally sure about this one. I know RBI has something to do with managing risk, but I'm not confident I can explain the specific purpose. I'll have to think this through carefully.

upvoted 0 times

...

Aleisha

5 months ago

I've got this! An RFP is used to provide vendors with the technical and functional requirements for a system or project. That's exactly what option A is describing. I'm confident that's the correct answer.

upvoted 0 times

...