MENU
You perform a security assessment on a customer architecture and discover that multiple VMs have public IP addresses. After providing a recommendation to remove the public IP addresses, you are told those VMs need to communicate to external sites as part of the customer's typical operations. What should you recommend to reduce the need for public IP addresses in your customer's VMs?
Suggested Answer: D
Get Premium Professional Cloud Security Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
AN
Antione
12 months ago
Cloud NAT is great for outbound traffic without exposing VMs!
LE
Lenna
1 year ago
Wait, can Cloud Router really help with this? Sounds off.
MA
Marci
1 year ago
Definitely agree, public IPs are a security risk.
BE
Ben
1 year ago
I think Cloud VPN could work too, but not sure it's the best fit.
SH
Sherita
1 year ago
Cloud NAT is the way to go for this!
JU
Juan
1 year ago
Cloud Router seems like it’s more for managing routes, so I doubt it’s the best option for reducing public IPs. I think Cloud NAT is the way to go!
LA
Lavera
1 year ago
I feel like Cloud VPN could be relevant if they need secure connections, but it doesn't really solve the public IP problem directly.
CE
Cecily
1 year ago
I'm not entirely sure, but I think Google Cloud Armor is more about security rather than addressing the public IP issue.
MI
Mica
1 year ago
I remember studying about Cloud NAT and how it allows VMs to access the internet without needing public IPs. That might be the right choice here.
MA
Maira
1 year ago
This seems straightforward enough. The folder policy denies INTERNAL_TCP_UDP and INTERNAL_HTTP_HTTPS, while the project policy denies EXTERNAL_TCP_PROXY and EXTERNAL_SSL_PROXY. So the answer must be option D.
SH
Shay
1 year ago
Hmm, I'm a bit unsure about this one. I know senior managers have an important role, but I'm not sure if it's more about leading the recovery teams or just overseeing the process. I'll have to think this through carefully.
TO
Toshia
1 year ago
Hmm, this looks like it's asking about BIND server configuration. I'll need to carefully review the options and think through the key details provided.