Discuss Google Professional Cloud DevOps Engineer Exam Topic 2 Question 78

You are configuring a Cl pipeline. The build step for your Cl pipeline integration testing requires access to APIs inside your private VPC network. Your security team requires that you do not expose API traffic publicly. You need to implement a solution that minimizes management overhead. What should you do?

AUse Cloud Build private pools to connect to the private VPC.

BUse Spinnaker for Google Cloud to connect to the private VPC.

CUse Cloud Build as a pipeline runner. Configure Internal HTTP(S) Load Balancing for API access.

DUse Cloud Build as a pipeline runner. Configure External HTTP(S) Load Balancing with a Google Cloud Armor policy for API access.

Suggested Answer: A

Cloud Build is a service that executes your builds on Google Cloud Platform infrastructure1.Cloud Build can be used as a pipeline runner for your CI pipeline, which is a process that automates the integration and testing of your code2.Cloud Build private pools are private, dedicated pools of workers that offer greater customization over the build environment, including the ability to access resources in a private VPC network3. A VPC network is a virtual network that provides connectivity for your Google Cloud resources and services.By using Cloud Build private pools, you can implement a solution that minimizes management overhead, as Cloud Build private pools are hosted and fully-managed by Cloud Build and scale up and down to zero, with no infrastructure to set up, upgrade, or scale3. You can also implement a solution that meets your security requirement, as Cloud Build private pools use network peering to connect into your private VPC network and do not expose API traffic publicly.

Get Premium Professional Cloud DevOps Engineer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

27 comments · newest first

Yoko 11 months ago

I’m surprised D is even an option with those security requirements.

Mariko 11 months ago

Wait, why would you use external load balancing? That sounds risky!

Sharen 11 months ago

B seems like overkill for this scenario.

Ezekiel 11 months ago

I think C could work too, but it might add complexity.

Cecilia 12 months ago

A is the best choice for private VPC access.

Mohammad 12 months ago

I’m leaning towards option D, but I’m not confident about using External Load Balancing for a private VPC. That seems risky.

Nieves 1 year ago

I feel like Internal HTTP(S) Load Balancing could be the right choice, but I can't recall the specifics on how it minimizes management overhead.

Ahmed 1 year ago

I think Spinnaker might be more complex than necessary for this scenario. We practiced simpler solutions in our last session.

Xochitl 1 year ago

I remember we discussed using Cloud Build private pools in class, but I'm not entirely sure how they connect to VPCs.

Felix 1 year ago

I'm leaning towards the Cloud Build with internal load balancing solution. That seems like it would provide the necessary access while still keeping the API traffic private.

Chara 1 year ago

Interesting, I hadn't considered using Spinnaker for this. I'll need to look into that option a bit more to see how it compares to the Cloud Build approach.

Cherry 1 year ago

Okay, I think I've got a handle on this. Using Cloud Build private pools seems like the most straightforward way to connect to the private VPC while minimizing management overhead.

Olene 1 year ago

Hmm, I'm a bit confused about the different options here. I'll need to review the details of each approach to see which one best fits the requirements.

Ashley 1 year ago

This looks like a tricky one. I'll need to think through the security requirements and management overhead carefully.

Xuan 1 year ago

Okay, the question is asking for two actions, so I'll need to identify the two correct ones from the options provided. Gotta be careful not to overthink this.

Dong 2 years ago

D seems like a lot of work, and I'm not a fan of exposing my API traffic publicly, even with Armor.

Tarra 2 years ago

Whoa, using Spinnaker for this? Isn't that like using a bazooka to swat a fly?

Tonette 2 years ago

↳ replying to Tarra

C) Yeah, using Spinnaker might be overkill for this scenario.

Louisa 2 years ago

↳ replying to Tarra

B) I think that would be the best option to minimize management overhead.

Tamra 2 years ago

↳ replying to Tarra

A) Use Cloud Build private pools to connect to the private VPC.

Pearlene 2 years ago

I'm not sure, but option C also sounds like a good choice. Configuring Internal HTTP(S) Load Balancing for API access could be a viable option as well.

Heike 2 years ago

I agree with Carmelina. Using Cloud Build private pools seems like the most secure and low management overhead solution.

Carmelina 2 years ago

I think option A is the best choice because it allows us to connect to the private VPC without exposing API traffic publicly.

Jaclyn 2 years ago

C sounds like a good option, but I'm not sure about the overhead of configuring the load balancer.

Jolene 2 years ago

A is the way to go! Private pools are a breeze to set up and maintain.

Xochitl 2 years ago

↳ replying to Jolene

Yeah, private pools are easy to manage.

Val 2 years ago

↳ replying to Jolene

I think A is the best option.

Google Professional Cloud DevOps Engineer Exam - Topic 2 Question 78 Discussion