PROFESSIONAL-CLOUD-DATABASE-ENGINEER · Question #36
You are writing an application that will run on Cloud Run and require a database running in the Cloud SQL managed service. You want to secure this instance so that it only receives connections from…
The correct answer is D. 1. Create your instance with a specified internal (private) IP address. Assigning the Cloud SQL instance a private (internal) IP address means it is only reachable from within your VPC - it has no public endpoint exposed to the internet. For Cloud Run, you connect it to your VPC using a Serverless VPC Access connector, allowing Cloud Run services…
Question
You are writing an application that will run on Cloud Run and require a database running in the Cloud SQL managed service. You want to secure this instance so that it only receives connections from applications running in your VPC environment in Google Cloud. What should you do?
Options
- A
- Create your instance with a specified external (public) IP address.
- B
- Create your instance with a specified external (public) IP address.
- C
- Create your instance with a specified internal (private) IP address.
- D
- Create your instance with a specified internal (private) IP address.
How the community answered
(25 responses)- B4% (1)
- C8% (2)
- D88% (22)
Explanation
Assigning the Cloud SQL instance a private (internal) IP address means it is only reachable from within your VPC - it has no public endpoint exposed to the internet. For Cloud Run, you connect it to your VPC using a Serverless VPC Access connector, allowing Cloud Run services to reach the private IP. An external (public) IP address (options A and B) exposes the instance to the internet, which is the opposite of the goal, even if you restrict access via authorized networks.
Topics
Community Discussion
No community discussion yet for this question.