Google Exam Professional Cloud Architect Topic 4 Question 99 Discussion

Actual exam question for Google's Professional Cloud Architect exam

Question #: 99
Topic #: 4

[All Professional Cloud Architect Questions]

You are configuring the cloud network architecture for a newly created project m Google Cloud that will host applications in Compote Engine Compute Engine virtual machine instances will be created in two different subnets (sub-a and sub-b) within a single region

* Instances in sub-a win have public IP addresses

* Instances in sub-b will have only private IP addresses

To download updated packages, instances must connect to a public repository outside the boundaries of Google Cloud You need to allow sub-b to access the external repository. What should you do?

AEnable Private Google Access on sub-b

BConfigure Cloud NAT and select sub b m the NAT mapping section

CConfigure a bastion host instance in sub a to connect to instances in sub-b

DEnable Identity Aware Proxy for TCP forwarding for instances in sub-b

Show Suggested Answer

Suggested Answer: B

by Mabel at Dec 04, 2024, 01:17 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Della

3 days ago

Option B is the way to go. Unless of course, you prefer to manually SSH into each sub-b instance to update packages. Where's the fun in that?

upvoted 0 times

...

Elsa

4 days ago

Jokes on you, the answer is obviously D. Identity Aware Proxy is the hip and trendy way to handle this kind of scenario these days!

upvoted 0 times

...

Rosendo

5 days ago

I'm not sure, but I'm leaning towards B. Seems like the easiest way to give sub-b access to the external repo without exposing those instances directly.

upvoted 0 times

...