Scenario: You are designing a multi-tier web application. You need a way to ensure that the database tier can only be accessed by the application tier, and the application tier can only be accessed by the load balancer. How would you do this in GCP?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: VPC Firewall rules using Target/Source 'Network Tags' or 'Service Accounts'

Network tags and service account identities are the standard way to create dynamic, scalable firewall rules in GCP instead of relying on individual IP addresses....

📋Part of Professional Cloud Architect · GCP Certification Practice

Real Exam ScenarioVPC Firewall Rules

Scenario: You are designing a multi-tier web application. You need a way to ensure that the database tier can only be accessed by the application tier, and the application tier can only be accessed by the load balancer. How would you do this in GCP?

✓ Correct Answer & ExplanationVPC Firewall Rules

Correct Answer

VPC Firewall rules using Target/Source 'Network Tags' or 'Service Accounts'

Why This Answer Is Correct

Network tags and service account identities are the standard way to create dynamic, scalable firewall rules in GCP instead of relying on individual IP addresses.

📚 What This Question Tests

This question evaluates your knowledge of VPC Firewall Rules — a core concept tested in Professional Cloud Architect. Understanding VPC Firewall Rules is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.

All Professional Cloud Architect Questions →Browse All GCP Exams →

Scenario: You are designing a multi-tier web application. You need a way to ensure that the database tier can only be accessed by the application tier, and the application tier can only be accessed by the load balancer. How would you do this in GCP?

Scenario: You are designing a multi-tier web application. You need a way to ensure that the database tier can only be accessed by the application tier, and the application tier can only be accessed by the load balancer. How would you do this in GCP?

📚 What This Question Tests

More VPC Firewall Rules Practice Questions