Network Design and Security Flashcards

A company wants to connect its on-premises data center to Google Cloud with a dedicated, private connection. Which service should they use?

Answer: Cloud Interconnect

Cloud Interconnect provides a dedicated, high-bandwidth connection between on-premises infrastructure and Google Cloud.

Which Google Cloud feature allows you to share a VPC network across multiple projects within the same organization?

Answer: Shared VPC

Shared VPC lets an organization connect resources from multiple projects to a common VPC network, enabling centralized network administration.

A team needs to allow GCE instances without external IPs to access the internet for software updates. What is the recommended approach?

Answer: Configure Cloud NAT

Cloud NAT allows VM instances without external IP addresses to initiate outbound connections to the internet.

Which GCP product provides a fully managed, distributed denial-of-service (DDoS) defense and WAF service?

Answer: Cloud Armor

Google Cloud Armor provides DDoS protection and web application firewall (WAF) policies for GCP applications.

You need two VPC networks in the same project to communicate privately without routing through the public internet. What should you use?

Answer: VPC Network Peering

VPC Network Peering allows private connectivity between VPC networks in the same or different projects without using external IPs.

Which firewall rule direction handles traffic coming INTO a VM instance from outside?

Answer: Ingress

Ingress firewall rules control inbound traffic arriving at VM instances from external sources.