You are hosting a containerized web app on GKE. You want to ensure that your backend pods can access a Cloud SQL database without exposing the database to the public internet. What is the recommended networking approach?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Enable Private IP for the Cloud SQL instance and use the Cloud SQL Auth Proxy

Private IP ensures the database is only reachable within the VPC. The Auth Proxy adds an additional layer of IAM-based authentication and secure tunneling....

๐Ÿ“‹Part of Professional Cloud Architect ยท GCP Certification Practice
Real Exam ScenarioCloud SQL

You are hosting a containerized web app on GKE. You want to ensure that your backend pods can access a Cloud SQL database without exposing the database to the public internet. What is the recommended networking approach?

โœ“ Correct Answer & ExplanationCloud SQL

Correct Answer

Enable Private IP for the Cloud SQL instance and use the Cloud SQL Auth Proxy

Why This Answer Is Correct

Private IP ensures the database is only reachable within the VPC. The Auth Proxy adds an additional layer of IAM-based authentication and secure tunneling.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Cloud SQL โ€” a core concept tested in Professional Cloud Architect. Understanding Cloud SQL is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.