Professional Cloud ArchitectDemo

By Google · Question Mode

QuestionQ281

Designing and planning a cloud solution architecture

Your organization runs a 3-tier web application in the same Google Cloud Platform network. Each tier—web, API, and database—scales independently of the other tiers. Network traffic must pass from the web tier to the API tier and then to the database tier. Traffic must not pass directly between the web and database tiers.

How should you configure the network?

  • A Add each tier to a different subnetwork
  • B Set up software based firewalls on individual VMs
  • C Add tags to each tier and set up routes to allow the desired traffic flow
  • D Add tags to each tier and set up firewall rules to allow the desired traffic flow
Explanation

Google Cloud VPC firewall rules control whether traffic is allowed or denied, and network tags let those rules apply to all instances in each scalable tier. Assign distinct tags to the web, API, and database tiers; allow web-to-API and API-to-database traffic with targeted firewall rules, and do not allow web-to-database traffic. Routes determine packet paths and do not provide this tier-to-tier access control.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!