Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ330

Securing communications and establishing boundary protection

A company is migrating a three-tier web application to Google Cloud. The application includes a web frontend, an application backend, and a database. Because of regulatory requirements and dependencies on existing on-premises infrastructure, a hybrid cloud architecture is required. The web frontend will run on Google Cloud, while the application backend and database will initially stay on-premises. Secure, efficient communication is needed between the cloud-hosted frontend and the on-premises backend and database, while minimizing latency and maximizing availability. What should you do?

  • A Establish a Dedicated Interconnect connection between the Google Cloud VPC network and the on-premises network. Configure firewall rules to allow communication between the three tiers.
  • B Establish a direct internet connection between the Google Cloud VPC network hosting the web frontend and the on-premises network that hosts the backend and database. Configure firewall rules to allow communication between the three tiers.
  • C Replicate the on-premises backend and database to Google Cloud. Use a hybrid connectivity network endpoint group for the primary. Backup to the zonal network endpoint group.
  • D Use a highly-available Cloud VPN connection over the public internet to connect the Google Cloud VPC network to the on-premises network.
Explanation

Dedicated Interconnect provides a direct physical connection between an on-premises network and Google Cloud VPC, delivering low-latency, highly available hybrid connectivity without sending traffic over the public internet. Appropriate firewall rules permit only the required tier-to-tier traffic. For production availability, Dedicated Interconnect should be deployed with the required redundant connections and VLAN attachments.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!