Exam Professional Cloud Network Engineer topic 1 question 187 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 187
Topic #: 1

[All Professional Cloud Network Engineer Questions]

Your organization is developing a landing zone architecture with the following requirements:

• There should be no communication possible between production and non-production en-vironments.
• Communication between applications within an environment may be necessary.
• Network administrators should centrally manage all network resources, including subnets, routes, and firewall rules.
• Each application should be billed separately.
• Developers of an application within a project should have the autonomy to create their compute resources. They should not create or modify networking resources.
• Up to 1000 applications are expected per environment.

You need to create a design that accommodates these requirements. What should you do?

A. Create a design that has one Shared VPC host project for the production environment, and another Shared VPC host project for the nonproduction environment. Associate the various applications' service projects with the corresponding environment's host project.
B. Create a design that has a Shared VPC for each project. Implement hierarchical firewall policies to apply micro-segmentation between VPCs.
C. Create a design that implements a single Shared VPUse VPC firewall rules with secure tags to enforce micro-segmentation between environments.
D. Create a design where each project in each environment has its own VPC with its own subnets, routes, and firewall rules. Ensure all VPCs are added as spokes to a Network Connectivity Center hub.

Show Suggested Answer

Suggested Answer: A 🗳️

by RKS_2021 at March 5, 2025, 4:44 a.m.

Comments

Submit Cancel

n2183712847

1 month, 2 weeks ago

Selected Answer: A

Option A is the only design that satisfies all requirements effectively. It provides strong isolation between environments, facilitates communication within environments, centralizes network management (per environment), supports per-application billing, enables developer autonomy over compute without granting network permissions, and scales to the required number of applications.

upvoted 1 times

...