Exam Associate Cloud Engineer topic 1 question 142 discussion

A for sure B - this allows internal communicaiton, but does nothing to limit public traffic C - deny all is nice, but it's for egress -- we're looking for ingress D - this is way to invasive and doesn't explicitly address the issue of preventing public internet traffic from reaching your instance -- if it does, someone let me know how.

A: answer looks right

A is the correct option, as other not limit the ingrres traffic

A for sure

A - for sure

A is the best anmswer.

A for sure

should be A. VMs cannot communicate over the internet without a public IP address. Private Google Access permits access to Google APIs and services in Google's production infrastructure. https://cloud.google.com/vpc/docs/private-google-access

Elimination

D is the right answer, with private google access for on-premises host, Private Google Access for on-premises hosts On-premises hosts with or without external IP addresses. Connect to Google APIs and services, from your on-premises network, through a Cloud VPN tunnel or Cloud Interconnect by using one of the Private Google Access-specific domains and VIPs. The Google services that you can access depend on which Private Google Access-specific domain you use. Use this option to connect to Google APIs and services through a VPC network. This method doesn't require your on-premises hosts to have external IP addresses. please refer to the link below for more insights, https://cloud.google.com/vpc/docs/private-google-access-hybrid

Through elimination - A

A is right

AAAAAAAAAA

A is correct

PRIVATE INSTANCE WITH A PUBLIC LOADBALANCER WOULD GO PUBLIC! IT'S CONFUSING

The question is about ingress traffic from Internet A - If the VM does not have public IP it is not routable from Internet. Correct answear B - it is about how to access Google Services API. It does not tell about ingress Internet traffic C - It is about egress traffic D - It could be but we do not know anything about Internet ingress traffic to on prem. What's more default route tells about egress traffic to Internet. Nothing how Internet can access Compute instance. Correct answer is A.

A is correct