Your organization stores highly sensitive data on-premises that cannot be sent over the public internet. The data must be processed both on-premises and in the cloud. What should your organization do?

Question

Options

• AConfigure Identity-Aware Proxy (IAP) in your Google Cloud VPC network
• BCreate a Cloud VPN tunnel between Google Cloud and your data center
• COrder a Partner Interconnect connection with your network provider
• DEnable Private Google Access in your Google Cloud VPC network

• A
  8% (3)
• B
  11% (4)
• C
  79% (30)
• D
  3% (1)

Explanation

Partner Interconnect provides private, dedicated network connectivity between an on-premises data center and Google Cloud through a supported service provider. Crucially, traffic never traverses the public internet, satisfying the requirement for highly sensitive data. Option B (Cloud VPN) is encrypted but still routes traffic over the public internet, which violates the stated constraint. Option A (Identity-Aware Proxy) controls application-level access but does not create a private network path. Option D (Private Google Access) allows VMs without public IPs to reach Google APIs internally, but does not create a private path from on-premises. Partner Interconnect is the correct fit when dedicated, off-internet connectivity is required.

No community discussion yet for this question.