exam questions

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam

Exam Professional Cloud Security Engineer topic 1 question 25 discussion

Actual exam question from Google's Professional Cloud Security Engineer
Question #: 25
Topic #: 1
[All Professional Cloud Security Engineer Questions]

Your team needs to configure their Google Cloud Platform (GCP) environment so they can centralize the control over networking resources like firewall rules, subnets, and routes. They also have an on-premises environment where resources need access back to the GCP resources through a private VPN connection.
The networking resources will need to be controlled by the network security team.
Which type of networking design should your team use to meet these requirements?

  • A. Shared VPC Network with a host project and service projects
  • B. Grant Compute Admin role to the networking team for each engineering project
  • C. VPC peering between all engineering projects using a hub and spoke model
  • D. Cloud VPN Gateway between all engineering projects using a hub and spoke model
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
Reference:
https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#centralize_network_control

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ArizonaClassics
Highly Voted 2 years, 9 months ago
I agree with A Centralize network control: Use Shared VPC to connect to a common VPC network. Resources in those projects can communicate with each other securely and efficiently across project boundaries using internal IPs. You can manage shared network resources, such as subnets, routes, and firewalls, from a central host project, enabling you to apply and enforce consistent network policies across the projects.
upvoted 19 times
ArizonaClassics
2 years, 9 months ago
WATCH: https://www.youtube.com/watch?v=WotV3D01tJA READ: https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#centralize_network_control
upvoted 5 times
...
...
Sheeda
Highly Voted 2 years, 8 months ago
I believe the answer is D. How can shared VPC give access to your on premise environment ? A seems wrong to me.
upvoted 5 times
AkbarM
7 months, 1 week ago
I also believe the same. i worked on interconnects and gateways to connect on prem resources.. only hub and spoke helps to connect onpremise network. ofcourse, we can centralize network controls using shared vpc. but the need here is some engineerng resources in on prem needs to access gcp resources. so this needs gateway to access gcp resources.
upvoted 2 times
...
...
kamal17
Most Recent 4 months, 3 weeks ago
Answer is D , bocz On-prime user needs to access the GCP resources with help of Cloud VPN
upvoted 2 times
...
GCP72
8 months ago
Selected Answer: A
The correct answer is A
upvoted 1 times
...
minostrozaml2
1 year, 3 months ago
Took the tesk today, only 5 question from this dump, the rest are new questions.
upvoted 1 times
...
ZODOGAM
1 year, 5 months ago
Sheeda En mi caso te confirmo que desde la share VPC se establecen las VPNs y allí ingresa el tráfico desde los sitios locales. Definitivamente, la respuesta es la A
upvoted 1 times
...
DebasishLowes
2 years, 1 month ago
Ans : A. It will be shared VPC as it is asking for centralized network control.
upvoted 1 times
...
jonclem
2 years, 5 months ago
Option D is incorrect and a violation of Google's Service Specific terms as per : https://cloud.google.com/network-connectivity/docs/vpn/concepts/overview I'd go with option A myself.
upvoted 1 times
...
[Removed]
2 years, 6 months ago
Ans - A
upvoted 1 times
...
saurabh1805
2 years, 6 months ago
A, this is exact reason to use shared VPC
upvoted 1 times
...
CHECK666
2 years, 7 months ago
A is the answer.
upvoted 1 times
...
Akku1614
2 years, 7 months ago
A is correct as Shared VPC provides us with Centralized control however VPC Peering is a decentralized option.
upvoted 1 times
...
aiwaai
2 years, 8 months ago
Correct Answer: A
upvoted 1 times
...
Sheeda
2 years, 8 months ago
Connect your enterprise network Many enterprises need to connect existing on-premises infrastructure with their Google Cloud resources. Evaluate your bandwidth, latency, and SLA requirements to choose the best connection option: If you need low-latency, highly available, enterprise-grade connections that enable you to reliably transfer data between your on-premises and VPC networks without traversing the internet connections to Google Cloud, use Cloud Interconnect: Dedicated Interconnect provides a direct physical connection between your on-premises network and Google's network. Partner Interconnect provides connectivity between your on-premises and Google Cloud VPC networks through a supported service provider. If you don't require the low latency and high availability of Cloud Interconnect, or you are just starting on your cloud journey, use Cloud VPN to set up encrypted IPsec VPN tunnels between your on-premises network and VPC. Compared to a direct, private connection, an IPsec VPN tunnel has lower overhead and costs.
upvoted 1 times
ESP_SAP
2 years, 5 months ago
you Should go back to the GCP Cloud Architect concepts or GCP Networking!
upvoted 2 times
...
ArizonaClassics
2 years, 8 months ago
Sheeda you need to read and understand the the question.
upvoted 1 times
ArizonaClassics
2 years, 8 months ago
They are asking how you can centralize the control over networking resources like firewall rules, subnets, and routes. watch this: https://www.youtube.com/watch?v=WotV3D01tJA you will see that you can also manage vpn connections as well
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago