Exam Professional Cloud Network Engineer topic 1 question 202 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 202
Topic #: 1

[All Professional Cloud Network Engineer Questions]

Your organization has a subset of applications in multiple regions that require internet access. You need to control internet access from applications to URLs, including hostnames and paths. The compute instances that run these applications have an associated secure tag. What should you do?

A. Deploy a Cloud NAT gateway. Use fully qualified domain name (FQDN) objects in the firewall policy rules to filter outgoing traffic to specific domains from machines that match a service account.
B. Deploy a Cloud NAT gateway. Use fully qualified domain name (FQDN) objects in the firewall policy rules to filter outgoing traffic to specific domains from machines that match the secure tag.
C. Deploy a single Secure Web Proxy instance with global access enabled. Apply a Secure Web Proxy policy to allow access from machines that match the secure tag to the URLs defined in a URL list.
D. Deploy a Secure Web Proxy instance in each region. Apply a Secure Web Proxy policy to allow access from machines that match the secure tag to the URLs defined in a URL list.

Show Suggested Answer

Suggested Answer: D 🗳️

by RKS_2021 at Feb. 25, 2025, 5:44 a.m.

Comments

Submit Cancel

n2183712847

1 month, 2 weeks ago

Selected Answer: D

D Secure Web Proxy with regional deployments and URL lists, combined with secure tags, is the best way to control internet access based on URLs from VMs in multiple regions, using a cloud-native solution with granular control.

upvoted 1 times

...

1f01b87

3 months ago

Selected Answer: D

D is correct

upvoted 1 times

...

RKS_2021

3 months, 3 weeks ago

Selected Answer: D

Secure Web Proxy instance in each region -- It is regional

upvoted 1 times

...