Google
PROFESSIONAL-CLOUD-ARCHITECT · Question #46
Your organization has a 3-tier web application deployed in the same network on Google Cloud Platform. Each tier (web, API, and database) scales independently of the others Network traffic should…
The correct answer is D. Add tags to each tier and set up firewall rules to allow the desired traffic flow. Google Cloud Platform(GCP) enforces firewall rules through rules and tags. GCP rules and tags can be defined once and used across all regions. https://aws.amazon.com/it/blogs/aws/building-three-tier-architectures-with-security-groups/
Submitted by rania.sa· Mar 30, 2026Designing for security and compliance
Question
Your organization has a 3-tier web application deployed in the same network on Google Cloud Platform. Each tier (web, API, and database) scales independently of the others Network traffic should flow through the web to the API tier and then on to the database tier. Traffic should not flow between the web and the database tier. How should you configure the network?
Options
- AAdd each tier to a different subnetwork.
- BSet up software based firewalls on individual VMs.
- CAdd tags to each tier and set up routes to allow the desired traffic flow.
- DAdd tags to each tier and set up firewall rules to allow the desired traffic flow.
How the community answered
(47 responses)- A4% (2)
- B6% (3)
- C15% (7)
- D74% (35)
Explanation
Google Cloud Platform(GCP) enforces firewall rules through rules and tags. GCP rules and tags can be defined once and used across all regions. https://aws.amazon.com/it/blogs/aws/building-three-tier-architectures-with-security-groups/
Topics
#VPC firewall rules#network tags#multi-tier architecture#traffic segmentation
Community Discussion
No community discussion yet for this question.