Exam Professional Cloud Security Engineer topic 1 question 329 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 329
Topic #: 1

[All Professional Cloud Security Engineer Questions]

Your organization is implementing a new Python application that will be deployed on Cloud Run. The application needs to connect to a MySQL database that runs on Cloud SQL in a different project in your Google Cloud organization. You must secure the connection from the application to the Cloud SQL instance while minimizing management overhead. What should you do?

A. Use a public IP address for the Cloud SQL instance. Integrate the Cloud SQL Python Connector into your application code to connect to the Cloud SQL instance.
B. Ensure that the Cloud SQL instance doesn’t have a public IP address. Configure Cloud Run to use Cloud SQL Auth Proxy to connect to the Cloud SQL instance.
C. Ensure that the Cloud SQL instance doesn't have a public IP address. Enforce SSL/TLS. Require the use of a trusted client certificate to connect to the Cloud SQL instance.
D. Ensure that the Cloud SQL instance doesn’t have a public IP address. Configure the application's IP address as an authorized network to connect to the Cloud SQL instance.

Show Suggested Answer

Suggested Answer: B 🗳️

by uberr at July 4, 2025, 9:43 p.m.

Comments

Submit Cancel

kharakbeer

2 weeks, 4 days ago

Selected Answer: B

B is correct

upvoted 1 times

...