Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam

Exam Professional Cloud Security Engineer topic 1 question 56 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 56
Topic #: 1

[All Professional Cloud Security Engineer Questions]

A customer is collaborating with another company to build an application on Compute Engine. The customer is building the application tier in their GCP
Organization, and the other company is building the storage tier in a different GCP Organization. This is a 3-tier web application. Communication between portions of the application must not traverse the public internet by any means.
Which connectivity option should be implemented?

A. VPC peering
B. Cloud VPN
C. Cloud Interconnect
D. Shared VPC

Show Suggested Answer

Suggested Answer: A 🗳️

by Sheeda at Aug. 29, 2020, 1:11 a.m.

Comments

Submit Cancel

sc_cloud_learn

Highly Voted 3 years, 11 months ago

both are GCP, should be VPC peering- Option A

upvoted 17 times

...

okhascorpio

Most Recent 1 year, 4 months ago

Selected Answer: C

Key information being "Communication between portions of the application must not traverse the public internet by any means" leaves only option "C" as a valid one, as all other options rely on the public internet for data transmission.

upvoted 1 times

Oujay

11 months, 3 weeks ago

Connects your on-premises network to GCP, not relevant for connecting two GCP organizations

upvoted 2 times

...

[Removed]

1 year, 6 months ago

Selected Answer: A

Vpc peering definitely

upvoted 2 times

...

[Removed]

1 year, 11 months ago

Selected Answer: A

"A" Since both are in GCP then VPC Peering makes most sense. References: https://cloud.google.com/vpc/docs/vpc-peering

upvoted 3 times

...

shayke

2 years, 8 months ago

Selected Answer: A

only a

upvoted 2 times

...

AwesomeGCP

2 years, 8 months ago

Selected Answer: A

A – Peering two VPCs does permit traffic to flow between the two shared networks, but it’s only bi-directional. Peered VPC networks remain administratively separate. Dedicated Interconnect connections enable you to connect your on-premises network … in another project, as long as they are both in the same organization. hence A

upvoted 1 times

AzureDP900

2 years, 7 months ago

Agreed, A is correct.

upvoted 1 times

...

DP_GCP

4 years, 1 month ago

B is not correct because if Cloud VPN is used data travels over internet and question mentions it doesnt want the data to travel through internet. https://cloud.google.com/network-connectivity/docs/vpn/concepts/overview Cloud VPN securely connects your peer network to your Virtual Private Cloud (VPC) network through an IPsec VPN connection. Traffic traveling between the two networks is encrypted by one VPN gateway and then decrypted by the other VPN gateway. This action protects your data as it travels over the internet

upvoted 1 times

PATILDXB

2 years, 5 months ago

Cloud VPN is a private connection, and different from normal IP VPN or IPSecVPN. Cloud VPN does not ride on internet. B is correct and appropriate, as it is cheaper than VPC peering, because VPC peering incurs charges

upvoted 1 times

mikez2023

2 years, 4 months ago

Cloud VPN securely connects your peer network to your Virtual Private Cloud (VPC) network through an IPsec VPN connection. Traffic traveling between the two networks is encrypted by one VPN gateway and then decrypted by the other VPN gateway. This action protects your data as it travels over the internet. You can also connect two instances of Cloud VPN to each other.

upvoted 1 times