Google Professional Cloud Security Engineer Exam - Topic 2 Question 46 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 46
Topic #: 2

[All Professional Cloud Security Engineer Questions]

You need to connect your organization's on-premises network with an existing Google Cloud environment that includes one Shared VPC with two subnets named Production and Non-Production. You are required to:

Use a private transport link.

Configure access to Google Cloud APIs through private API endpoints originating from on-premises environments.

Ensure that Google Cloud APIs are only consumed via VPC Service Controls.

What should you do?

A1. Set up a Cloud VPN link between the on-premises environment and Google Cloud.
2. Configure private access using the restricted googleapis.com domains in on-premises DNS configurations.

B1. Set up a Partner Interconnect link between the on-premises environment and Google Cloud.
2. Configure private access using the private.googleapis.com domains in on-premises DNS configurations.

C1. Set up a Direct Peering link between the on-premises environment and Google Cloud.
2. Configure private access for both VPC subnets.

D1. Set up a Dedicated Interconnect link between the on-premises environment and Google Cloud.
2. Configure private access using the restricted.googleapis.com domains in on-premises DNS configurations.

Show Suggested Answer

Suggested Answer: C

by Irma at May 06, 2022, 03:47 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Billye

5 months ago

D sounds complicated, not sure if it's necessary.

upvoted 0 times

...

Nichelle

6 months ago

Wait, can you really use restricted domains for private access?

upvoted 0 times

...

Buddy

6 months ago

C seems a bit overkill for most setups.

upvoted 0 times

...

Elizabeth

6 months ago

I think B is better for higher bandwidth needs.

upvoted 0 times

...

Mariann

6 months ago

A Cloud VPN is a solid choice for secure connections.

upvoted 0 times

...

Oren

6 months ago

I’m leaning towards Dedicated Interconnect because it sounds robust, but I’m confused about the difference between restricted and private.googleapis.com.

upvoted 0 times

...

Ngoc

6 months ago

I feel like Direct Peering was mentioned in a practice question, but I’m uncertain if it meets all the requirements for API access.

upvoted 0 times

...

Antonette

6 months ago

I think Partner Interconnect might be the right choice since it offers a dedicated connection, but I can't recall the specifics about DNS configurations.

upvoted 0 times

...

Sabra

6 months ago

I remember we discussed Cloud VPN in class, but I'm not sure if it's the best option for a private transport link.

upvoted 0 times

...

Suzan

6 months ago

The Path-ID is an important BGP concept, so I'll make sure to read each option carefully before selecting my answer.

upvoted 0 times

...

Martina

7 months ago

Hmm, I remember learning about winbox, but I can't recall the exact protocol and port off the top of my head. I'll have to think this through carefully.

upvoted 0 times

...