PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #129
You are configuring an HA VPN connection between your Virtual Private Cloud (VPC) and on- premises network. The VPN gateway is named VPN_GATEWAY_1. You need to restrict VPN tunnels created in the proj
The correct answer is B. Configure the Resource Manager constraint constraints/compute.restrictVpnPeerIPs to use an. For VPNs, a VPN gateway requires a public IP address for you to connect your on-premises environment to Google Cloud. To ensure that your VPN gateway is protected, use the org policy constraint named constraints/compute.restrictVpnPeerIPs. This constraint will limit the public IP
Question
Options
- AConfigure a firewall rule accepting 203.0.113.1/32, and set a target tag equal to
- BConfigure the Resource Manager constraint constraints/compute.restrictVpnPeerIPs to use an
- CConfigure a Google Cloud Armor security policy, and create a policy rule to allow 203.0.113.1/32.
- DConfigure an access control list on the peer VPN gateway to deny all traffic except
How the community answered
(43 responses)- A5% (2)
- B72% (31)
- C14% (6)
- D9% (4)
Explanation
For VPNs, a VPN gateway requires a public IP address for you to connect your on-premises environment to Google Cloud. To ensure that your VPN gateway is protected, use the org policy constraint named constraints/compute.restrictVpnPeerIPs. This constraint will limit the public IPs that are allowed to initiate IPSec sessions with your VPN gateway. https://cloud.google.com/blog/topics/developers-practitioners/limiting-public-ips-google-cloud
Topics
Community Discussion
No community discussion yet for this question.