Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Security Engineer Exam - Topic 1 Question 22 Discussion

Your team needs to make sure that their backend database can only be accessed by the frontend application and no other instances on the network.How should your team design this network?
A) Create an ingress firewall rule to allow access only from the application to the database using firewall tags.
B) Create a different subnet for the frontend application and database to ensure network isolation.
C) Create two VPC networks, and connect the two networks using Cloud VPN gateways to ensure network isolation.
D) Create two VPC networks, and connect the two networks using VPC peering to ensure network isolation.

Google Professional Cloud Security Engineer Exam - Topic 1 Question 22 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam
Question #: 22
Topic #: 1
[All Professional Cloud Security Engineer Questions]

Your team needs to make sure that their backend database can only be accessed by the frontend application and no other instances on the network.

How should your team design this network?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Alease at May 09, 2022, 10:53 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Ciara
10 months ago
Wait, can we really trust just firewall rules?
upvoted 0 times
...
Pamella
10 months ago
D is interesting, but is peering really necessary?
upvoted 0 times
...
Levi
11 months ago
C seems a bit overkill for this scenario.
upvoted 0 times
...
Stanford
11 months ago
I think B is better for isolation.
upvoted 0 times
...
Jeannine
11 months ago
Option A sounds solid for controlling access!
upvoted 0 times
...
Reena
11 months ago
I’m a bit confused about the differences between VPC peering and VPN. I think both options could provide isolation, but I’m not sure which is more appropriate here.
upvoted 0 times
...
Delsie
11 months ago
I feel like options C and D are overkill for this scenario. Using Cloud VPN or VPC peering seems complicated when simpler solutions might work.
upvoted 0 times
...
Malcom
11 months ago
I remember practicing a similar question where subnetting was emphasized for security. Option B might be a good choice for isolating the database from other network traffic.
upvoted 0 times
...
Edward
11 months ago
I think option A makes sense because using firewall rules can directly control access to the database. But I'm not entirely sure if that's enough for complete isolation.
upvoted 0 times
...
Tatum
11 months ago
Okay, I think I've got it. Based on the information provided, the two statements that would make the code compile are B and C. Cycle must be an interface that MotorCycle implements, or an abstract superclass that MotorCycle extends.
upvoted 0 times
...
Vallie
11 months ago
Okay, I've got this. The key is understanding how the service is using entities to filter, split, or aggregate the KPIs. If the service needs to do any of those things based on entities, then it must define entity rules. Options A, C, and D all seem to be describing situations where that would be the case.
upvoted 0 times
...
Aliza
11 months ago
I'm not entirely sure, but I feel like an incorrect IP address could lead to connection issues. That could be a possibility.
upvoted 0 times
...
Cordelia
11 months ago
I remember something similar from practice questions, and I think option A looks right since it directly mentions exporting after transformation.
upvoted 0 times
...

Save Cancel