Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us[email protected]
Menu
Google Discussions
exam questions

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam
Go to Exam

Exam Professional Cloud Security Engineer topic 1 question 299 discussion

Actual exam question from Google's Professional Cloud Security Engineer
Question #: 299
Topic #: 1
[All Professional Cloud Security Engineer Questions]

You manage multiple internal-only applications that are hosted within different Google Cloud projects. You are deploying a new application that requires external internet access. To maintain security, you want to clearly separate this new application from internal systems. Your solution must have effective security isolation for the new externally-facing application. What should you do?

  • A. Deploy the application within the same project as an internal application. Use a Shared VPC model to manage network configurations.
  • B. Place the application in the same project as an existing internal application, and adjust firewall rules to allow external traffic.
  • C. Create a VPC Service Controls perimeter, and place the new application’s project within that perimeter.
  • D. Create a new project for the application, and use VPC Network Peering to access necessary resources in the internal projects.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by abdelrahman89 at Oct. 4, 2024, 9:54 p.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
f36bdb5
1 week, 2 days ago
Selected Answer: C
It does not say anywhere that the external application should access internal resources. VPC peering would then be a massive security risk
upvoted 1 times
...
json4u
1 month, 1 week ago
Selected Answer: D
It's D
upvoted 1 times
...
abdelrahman89
1 month, 2 weeks ago
D - Dedicated Project: Creating a new project for the externally-facing application provides a clear separation from internal systems, reducing the risk of unauthorized access or lateral movement. VPC Network Peering: Using VPC Network Peering allows the new project to access resources in the internal projects, while maintaining a controlled and secure boundary. This ensures that external traffic cannot directly access internal resources without going through the established peering connection. Improved Security: This approach offers enhanced security by minimizing the attack surface and limiting the potential impact of a breach.
upvoted 1 times
...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel