nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #408

You are deploying a large, multi-tiered application with more than 1,000 IP addresses in a Google Cloud project that needs to be securely isolated. The application includes the: 1. web tier with front

The correct answer is B. Create one custom mode /16 VPC with three subnets. Place each tier in its own subnet and use. A single custom mode /16 VPC provides enough private IP space for over 1,000 addresses, keeps the application isolated within one project, and minimizes cost and complexity. Placing each tier in its own subnet and controlling traffic with subnet-based firewall rules gives clear,

Submitted by packet_pusher· Mar 30, 2026Planning and configuring a cloud solution

Question

You are deploying a large, multi-tiered application with more than 1,000 IP addresses in a Google Cloud project that needs to be securely isolated. The application includes the: 1. web tier with frontend servers for public traffic, 2. application tier with servers running core application logic that only need access from the web tier, and 3. database tier with database servers that only need access from the application tier. You want to minimize cost, complexity, and administrative overhead in the network architecture. What should you do?

Options

  • ACreate a /24 Shared VPC with separate subnets for each tier. Use firewall rules that reference
  • BCreate one custom mode /16 VPC with three subnets. Place each tier in its own subnet and use
  • CDeploy each tier into a separate custom mode /16 VPC. Use VPC Network Peering to securely
  • DDeploy each tier in a /24 VPC by using network tags to identify instances. Implement firewall rules

How the community answered

(19 responses)
  • A
    32% (6)
  • B
    42% (8)
  • C
    5% (1)
  • D
    21% (4)

Explanation

A single custom mode /16 VPC provides enough private IP space for over 1,000 addresses, keeps the application isolated within one project, and minimizes cost and complexity. Placing each tier in its own subnet and controlling traffic with subnet-based firewall rules gives clear, simple segmentation between web, app, and database tiers with low administrative overhead.

Topics

#VPC subnets#firewall rules#network architecture#multi-tier application

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice