Exam Associate Cloud Engineer topic 1 question 279 discussion

Option B: Private Google Access allows internal Google Cloud resource access but does not make Cloud Run services accessible from on-premises networks. Option C: Private Service Connect creates private endpoints that are accessible from your VPC, and with the proper network configuration (e.g., VPN or Interconnect), allows access from on-premises networks.

The correct answer is C. Here's the documentation: https://cloud.google.com/run/docs/securing/private-networking#from-on-prem

We need to connect to the on-premise network. Private google connect can enable that

We need to connect to the on-premise network. Private google access does not enable this.

The sentence "you also need to update the web application multiple times per day with minimal effort and want to manage a minimal amount of cloud infrastructure" makes Cloud Run favourable over GKE.

The most important thing that told me to choose B is the easier upgrade that Cloud Run provides.

Here's why B is the most suitable for the given requirements: Cloud Run: Cloud Run is a fully managed serverless platform for containerized applications. It eliminates the need to manage infrastructure, making it easy to deploy and update your web application multiple times a day with minimal effort. It also scales automatically based on traffic. Private Google Access (PGA): PGA allows resources in a private VPC network (without public IP addresses) to access Google APIs and services, including Cloud Run. This enables you to keep your web application private while still making it accessible from your internal network and on-premises environment.