nerdexam
Google

CLOUD-DIGITAL-LEADER · Question #110

One of your customers used to have a private data center. While within their data center itself, they were consuming some Google services via API calls and other public, well-known addresses…

The correct answer is D. Enable Private Google Access so that they can remove public IP addresses. "VM instances that only have internal IP addresses (no external IP addresses) can use Private Google Access. They can reach the external IP addresses of Google APIs and services. f you disable Private Google Access, the VM instances can no longer reach Google APIs and services…

Google Cloud Security and Operations

Question

One of your customers used to have a private data center. While within their data center itself, they were consuming some Google services via API calls and other public, well-known addresses pub-lished by Google. Now they're evacuating their private data center and are moving to Google Cloud. Could they improve some of their existing architecture with respect to security?

Options

  • AUse VPC Peering with the Google Cloud organization so that you can directly use services using
  • BUse private addresses only. No additional configuration is required. All Google services will be
  • CUse Shared VPCs with the Google Cloud organization so that you can directly use services using
  • DEnable Private Google Access so that they can remove public IP addresses.

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    14% (4)
  • C
    4% (1)
  • D
    79% (22)

Explanation

"VM instances that only have internal IP addresses (no external IP addresses) can use Private Google Access. They can reach the external IP addresses of Google APIs and services. f you disable Private Google Access, the VM instances can no longer reach Google APIs and services; they can only send traffic within the VPC network." https://cloud.google.com/vpc/docs/private-google-access

Topics

#Private Google Access#Network Security#Google Cloud Networking#Cloud Migration

Community Discussion

No community discussion yet for this question.

Full CLOUD-DIGITAL-LEADER Practice