Professional Cloud Security Engineer
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
An enterprise is designing a multi-tier perimeter security architecture in Google Cloud for containerized workloads hosted on Compute Engine VMs, alongside a dedicated virtual security appliance. The deployment must satisfy the following networking and boundary requirements:
StudyCerts
StudyCerts100.64.0.0/10), without violating Google Cloud subnet allocation rules.vpc-untrusted and vpc-trusted) to inspect and filter transit traffic between them.Which configuration should the enterprise implement to satisfy these requirements?
This architecture leverages Custom Mode VPC subnets, RFC 6598 Shared Address Space, VPC Alias IP ranges, and Multi-NIC Compute Engine instances to build a secure, isolated network topology that overcomes RFC 1918 address exhaustion.
100.64.0.0/10) and privately used public IP ranges. This eliminates conflicts with existing on-premises RFC 1918 subnets.nic0. Each container gets a discrete internal IP address that VPC firewall rules can independently target using IP filters or service accounts.nic0 in vpc-untrusted and nic1 in vpc-trusted during VM instantiation satisfies the rule that each vNIC must belong to a unique VPC network.This design complies strictly with Google Cloud network constraints: it avoids prohibited address spaces, adheres to the rule that vNICs cannot be added after VM creation, and utilizes native secondary subnet ranges for container addressing.
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.