CLOUD-DIGITAL-LEADER · Question #321
Your organization runs all its workloads on Compute Engine virtual machine instances. Your organization has a security requirement: the virtual machines are not allowed to access the public…
The correct answer is D. Private Google Access. Private Google Access allows VM instances that have no external (public) IP addresses to reach Google APIs and services - including BigQuery and Cloud Storage - through Google's internal network without traversing the public internet. This satisfies the security requirement…
Question
Your organization runs all its workloads on Compute Engine virtual machine instances. Your organization has a security requirement: the virtual machines are not allowed to access the public internet. The workloads running on those virtual machines need to access BigQuery and Cloud Storage, using their publicly accessible interfaces, without violating the security requirement. Which Google Cloud product or feature should your organization use?
Options
- AIdentity-Aware Proxy
- BCloud NAT (network address translation)
- CVPC internal load balancers
- DPrivate Google Access
How the community answered
(42 responses)- A2% (1)
- B7% (3)
- C2% (1)
- D88% (37)
Explanation
Private Google Access allows VM instances that have no external (public) IP addresses to reach Google APIs and services - including BigQuery and Cloud Storage - through Google's internal network without traversing the public internet. This satisfies the security requirement. Cloud NAT (B) enables outbound internet access for private VMs, which would violate the requirement. Identity-Aware Proxy (A) controls application access, and internal load balancers (C) route traffic within a VPC, neither of which addresses API access for private VMs.
Topics
Community Discussion
No community discussion yet for this question.