Network Design and Security Flashcards

What is the function of Cloud Router in Google Cloud?

Answer: Dynamically exchanges routes between VPC and on-premises networks using BGP

Cloud Router uses Border Gateway Protocol (BGP) to dynamically advertise and learn routes between Google Cloud and on-premises networks.

A company wants to restrict all internet egress from its GCP VPC except through an approved proxy. What is the best architecture?

Answer: Deploy a Squid proxy on a GCE instance with restrictive egress firewall rules

Deploying a managed proxy (like Squid) with firewall rules that force all egress through it gives centralized control over outbound internet traffic.

Which GCP feature provides network traffic analysis by capturing metadata about IP flows into and out of VMs?

Answer: VPC Flow Logs

VPC Flow Logs capture metadata (source, destination, ports, bytes) for network flows in your VPC for monitoring and security analysis.

A GCP architect needs to give on-premises users low-latency access to a Cloud Storage bucket without traversing the internet. What should they use?

Answer: Direct Peering or Cloud Interconnect with Private Google Access for on-premises

Cloud Interconnect combined with Private Google Access for on-premises enables low-latency, private access to Google services like Cloud Storage.

What is the maximum number of VPC networks you can create per project by default in Google Cloud?

Answer: 10

By default, each GCP project can have up to 10 VPC networks, though this quota can be increased by request.

Which Google Cloud service lets you centrally manage and enforce security policies across all projects in an organization?

Answer: Organizational Policy Service

Organization Policy Service lets administrators define constraints on resource configurations across an entire GCP organization.