nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #234

Your company is moving its entire workload to Compute Engine. Some servers should be accessible through the Internet, and other servers should only be accessible over the internal network. All servers

The correct answer is A. 1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN.. By default traffic between subnets on a VPC network is not allowed (except on the "default" (This blocks traffic between all instances, not just traffic between subnets => FW rules must be defined to allow communications between all instances, regardless the subnets) 2 VPC will n

Submitted by hans_de· Mar 30, 2026Planning and configuring a cloud solution

Question

Your company is moving its entire workload to Compute Engine. Some servers should be accessible through the Internet, and other servers should only be accessible over the internal network. All servers need to be able to talk to each other over specific ports and protocols. The current on-premises network relies on a demilitarized zone (DMZ) for the public servers and a Local Area Network (LAN) for the private servers. You need to design the networking infrastructure on Google Cloud to match these requirements. What should you do?

Options

  • A
    1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN.
  • B
    1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN.
  • C
    1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN.
  • D
    1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN.

How the community answered

(32 responses)
  • A
    44% (14)
  • B
    34% (11)
  • C
    6% (2)
  • D
    16% (5)

Explanation

By default traffic between subnets on a VPC network is not allowed (except on the "default" (This blocks traffic between all instances, not just traffic between subnets => FW rules must be defined to allow communications between all instances, regardless the subnets) 2 VPC will not work without peering.

Topics

#VPC design#subnets#DMZ#firewall rules

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full ASSOCIATE-CLOUD-ENGINEER Practice