nerdexam
Google

PROFESSIONAL-CLOUD-DATABASE-ENGINEER · Question #19

You are migrating your data center to Google Cloud. You plan to migrate your applications to Compute Engine and your Oracle databases to Bare Metal Solution for Oracle. You must ensure that the…

The correct answer is A. Set up a Shared VPC, configure multiple service projects, and create firewall rules. Shared VPC is the correct Google-recommended architecture for enabling secure and efficient communication between resources across multiple projects. With Shared VPC, a host project owns the VPC network and subnets, and service projects attach to it - allowing Compute Engine…

Networking for Database Solutions

Question

You are migrating your data center to Google Cloud. You plan to migrate your applications to Compute Engine and your Oracle databases to Bare Metal Solution for Oracle. You must ensure that the applications in different projects can communicate securely and efficiently with the Oracle databases. What should you do?

Options

  • ASet up a Shared VPC, configure multiple service projects, and create firewall rules.
  • BSet up Serverless VPC Access.
  • CSet up Private Service Connect.
  • DSet up Traffic Director.

How the community answered

(27 responses)
  • A
    78% (21)
  • B
    11% (3)
  • C
    7% (2)
  • D
    4% (1)

Explanation

Shared VPC is the correct Google-recommended architecture for enabling secure and efficient communication between resources across multiple projects. With Shared VPC, a host project owns the VPC network and subnets, and service projects attach to it - allowing Compute Engine instances in different projects to communicate over internal IP addresses without traversing the public internet. Bare Metal Solution for Oracle is connected to Google Cloud via a dedicated partner interconnect or VLAN attachment into a VPC, making it accessible within the Shared VPC. Firewall rules then enforce security boundaries. Serverless VPC Access (B) is only for serverless products like Cloud Run and Cloud Functions, not general Compute Engine workloads. Private Service Connect (C) is for accessing managed Google services. Traffic Director (D) is a service mesh control plane for microservices, not for database connectivity.

Topics

#Shared VPC#Bare Metal Solution#Network Connectivity#Multi-Project Architecture

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DATABASE-ENGINEER Practice