Exam Associate Cloud Engineer topic 1 question 317 discussion

Actual exam question from Google's Associate Cloud Engineer

Question #: 317
Topic #: 1

[All Associate Cloud Engineer Questions]

You are planning to migrate your on-premises VMs to Google Cloud. You need to set up a landing zone in Google Cloud before migrating the VMs. You must ensure that all VM in your production environment can communicate with each other through private IP addresses. You need to allow all VMs in your Google Cloud organization to accept connections on specific TCP ports. You want to follow Google-recommended practices, and you need to minimize your operational costs. What should you do?

A. Create individual VPCs per Google Cloud project. Peer all he VPC together. Apply organization policies on the organization level.
B. Create individual VPCs for each Google Cloud project. Peer ail ne VPCs together. Apply hierarchical firewall policies on the organization level.
C. Create a host VPC project with each production project as its service project. Apply organization policies on the organization level.
D. Create a host VPC project with each production project as its service project. Apply hierarchical firewall policies on the organization level.

Show Suggested Answer

Suggested Answer: D 🗳️

by toasty at July 12, 2025, 6:55 p.m.

Comments

Submit Cancel

toasty

4 weeks ago

Selected Answer: D

the combination that meets all the requirements is the use of a Shared VPC (Create a host VPC project with each production project as its service project) and Hierarchical Firewall Policies (Apply hierarchical firewall policies on the organization level). This approach aligns perfectly with Google Cloud's best practices for enterprise-level landing zones, providing the necessary network connectivity, centralized security control, and operational simplicity.

upvoted 1 times

...