Professional Cloud Security Engineer
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
An enterprise has deployed a backend microservice on Cloud Run with its ingress setting configured to internal to prevent direct exposure to the public internet. The security team needs to allow a frontend application running in App Engine standard environment within the same Google Cloud project to privately invoke this Cloud Run service.
Which architecture should the security team implement to satisfy these requirements?
Serverless VPC Access bridges Google Cloud serverless runtimes (such as App Engine standard, Cloud Run, and Cloud Functions) to a Virtual Private Cloud (VPC) network. Attaching a serverless service to a dedicated connector enables private egress into the VPC without allocating public IP addresses to individual serverless application instances.
StudyCerts
StudyCertsinternal only accepts requests that originate from inside an authorized VPC network or arrive via approved private paths. Serverless requests must traverse a VPC network to be recognized as internal traffic.all-traffic through the Serverless VPC Access connector forces all outbound traffic into the VPC subnet.run.app endpoints route privately through Google's internal network infrastructure rather than exiting to the public internet.Routing all-traffic through the connector while enabling Private Google Access on the connector subnet directly fulfills Google Cloud's architectural requirements for serverless-to-serverless internal communication, guaranteeing strict perimeter security without complex reverse proxies.
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.