Google Professional Cloud Security Engineer Exam - Topic 2 Question 27 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 27
Topic #: 2

[All Professional Cloud Security Engineer Questions]

You are in charge of migrating a legacy application from your company datacenters to GCP before the current maintenance contract expires. You do not know what ports the application is using and no documentation is available for you to check. You want to complete the migration without putting your environment at risk.

What should you do?

AMigrate the application into an isolated project using a ''Lift & Shift'' approach. Enable all internal TCP traffic using VPC Firewall rules. Use VPC Flow logs to determine what traffic should be allowed for the
application to work properly.

BMigrate the application into an isolated project using a ''Lift & Shift'' approach in a custom network. Disable all traffic within the VPC and look at the Firewall logs to determine what traffic should be allowed for the application to work properly.

CRefactor the application into a micro-services architecture in a GKE cluster. Disable all traffic from outside the cluster using Firewall Rules. Use VPC Flow logs to determine what traffic should be allowed for the application to work properly.

DRefactor the application into a micro-services architecture hosted in Cloud Functions in an isolated project.
Disable all traffic from outside your project using Firewall Rules. Use VPC Flow logs to determine what traffic should be allowed for the application to work properly.

Show Suggested Answer

Suggested Answer: A

by Alesia at May 08, 2022, 07:49 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dorcas

4 months ago

D could work, but refactoring might take longer than expected.

upvoted 0 times

...

Jarvis

4 months ago

C is too complicated for a lift & shift, just stick to the basics.

upvoted 0 times

...

Darell

4 months ago

Surprised they didn't mention checking the app logs first!

upvoted 0 times

...

Hassie

4 months ago

I think A is better, enabling all internal traffic seems risky.

upvoted 0 times

...

Lorriane

5 months ago

Option B sounds solid, isolating the traffic is key.

upvoted 0 times

...

Kirk

5 months ago

I feel like refactoring to micro-services could be beneficial, but I’m not confident about using GKE versus Cloud Functions. Which one is more suitable for legacy apps?

upvoted 0 times

...

Theron

5 months ago

I think option B sounds familiar from our practice questions. Disabling all traffic first seems safer, but I wonder if it might cause issues with the application.

upvoted 0 times

...

Tish

5 months ago

I remember we discussed the importance of isolating the application during migration, but I'm not sure if enabling all internal TCP traffic is the best approach.

upvoted 0 times

...

Helga

5 months ago

I recall that using VPC Flow logs is crucial for understanding traffic needs, but I’m unsure if I should prioritize a Lift & Shift or a refactor approach in this scenario.

upvoted 0 times

...

Chau

5 months ago

Okay, let me break this down. For an FTP file retrieval, you need a control connection to authenticate and issue commands, and a data connection to actually transfer the file. So the minimum would be 2 connections.

upvoted 0 times

...

Eva

5 months ago

I'm a bit confused by the options. Does CRM really require increasing the product range? That doesn't seem directly related to the core idea of understanding and meeting customer needs.

upvoted 0 times

...

Cecil

5 months ago

Honestly, I don't recall much about carbon content in fatigue. I think it might have been more relevant to hardness than to thermal fatigue in this context.

upvoted 0 times

...

Remona

5 months ago

Hmm, not sure about this one. I'd have to think through the project closure process and what key documents are involved. Maybe the statement of work would be relevant?

upvoted 0 times

...

Pearly

5 months ago

Okay, let's see. I know Jabber integrates with various Cisco collaboration tools, so I'm guessing the answer has to do with adding the user to one of those components. I'll need to review my notes on Jabber deployment.

upvoted 0 times

...