Correct Answer: Use VPC Firewall rules in the Host Project, targeting specific Service Account identities from Project A and Project B
In a Shared VPC, firewalls are managed in the Host Project. Using Service Account identities as source/target filters in firewall rules is the most secure and scalable way to enfor...
Correct Answer
Use VPC Firewall rules in the Host Project, targeting specific Service Account identities from Project A and Project B
Why This Answer Is Correct
In a Shared VPC, firewalls are managed in the Host Project. Using Service Account identities as source/target filters in firewall rules is the most secure and scalable way to enforce cross-project network isolation.
This question evaluates your knowledge of Virtual Private Cloud (VPC) — a core concept tested in Professional Cloud Architect. Understanding Virtual Private Cloud (VPC) is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
A large retail company needs to connect their on-premises data center to Google Cloud with a dedicated, low-latency 100 Gbps connection. They require the traffic to be encrypted in transit and must avoid the public internet. Which solution should they use?
A financial firm wants to ensure that no data can be exfiltrated from their BigQuery datasets, even by authorized users. They want to restrict access to these datasets to only specific VPC networks. Which tool should they implement?
A SaaS provider wants to offer their customers a way to privately access their internal API services hosted on GCP without using public IPs or VPNs. Which GCP feature enables this cross-organization private connectivity?
An organization wants to analyze the network traffic across all their GCP projects to identify unusual patterns or security threats. They need to see details like source/destination IP, ports, and protocols. What should they enable?
Which feature of the Google Cloud VPC network allows for global internal communication between VMs without needing external IPs or VPNs, even across multiple projects?