Professional Cloud Security EngineerDemo

Question

Your organization has on-premises hosts that must access Google Cloud APIs. You need to enforce private connectivity for these hosts, minimize costs, and optimize operational efficiency.

What should you do?

A Set up VPC peering between the hosts on-premises and the VPC through the internet.
B Route all on-premises traffic to Google Cloud through an IPsec VPN tunnel to a VPC with Private Google Access enabled.
C Enforce a security policy that mandates all applications to encrypt data with a Cloud Key Management Service (KMS) key before you send it over the network.
D Route all on-premises traffic to Google Cloud through a dedicated or Partner Interconnect to a VPC with Private Google Access enabled.

Explanation

Private Google Access for on-premises hosts can route Google API traffic through a Cloud VPN tunnel to a VPC, providing an alternative to accessing the APIs over the public internet. Cloud VPN uses IPsec and avoids the dedicated circuits, provider coordination, and higher fixed costs associated with Dedicated or Partner Interconnect when high bandwidth or low latency is not required.

Learn more

Professional Cloud Security EngineerDemo

AstroTutor

Notes

Readiness

QuestionQ137

Community Discussion