PROFESSIONAL-DATA-ENGINEER · Question #392
You are configuring networking for a Dataflow job. The data pipeline uses custom container images with the libraries that are required for the transformation logic preinstalled. The data pipeline read
The correct answer is C. Disable external IP addresses from worker VMs and enable Private Google Access.. Explanation/Reference: Private Google Access allows VMs without external IP addresses to communicate with Google APIs and services over internal routes. This reduces the cost and increases the security of the data pipeline. Custom container images can be stored in Container Regis
Question
Options
- ALeave external IP addresses assigned to worker VMs while enforcing firewall rules.
- BDisable external IP addresses and establish a Private Service Connect endpoint IP address.
- CDisable external IP addresses from worker VMs and enable Private Google Access.
- DEnable Cloud NAT to provide outbound internet connectivity while enforcing firewall rules.
How the community answered
(33 responses)- A12% (4)
- B3% (1)
- C82% (27)
- D3% (1)
Explanation
Explanation/Reference: Private Google Access allows VMs without external IP addresses to communicate with Google APIs and services over internal routes. This reduces the cost and increases the security of the data pipeline. Custom container images can be stored in Container Registry, which supports Private Google Access. Dataflow supports Private Google Access for both batch and streaming jobs.
Topics
Community Discussion
No community discussion yet for this question.