Topic 1 Question 29
Your organization runs all its workloads on Compute Engine virtual machine instances. Your organization has a security requirement: the virtual machines are not allowed to access the public internet. The workloads running on those virtual machines need to access BigQuery and Cloud Storage, using their publicly accessible interfaces, without violating the security requirement. Which Google Cloud product or feature should your organization use?
Identity-Aware Proxy
Cloud NAT (network address translation)
VPC internal load balancers
Private Google Access
解説
Reference: https://cloud.google.com/nat

ユーザの投票
コメント(17)
- 正解だと思う選択肢: D
Agree with fpreli, the answer is D. According to the Google Documents >>> By default, when a Compute Engine VM lacks an external IP address assigned to its network interface, it can only send packets to other internal IP address destinations. You can allow these VMs to connect to the set of external IP addresses used by Google APIs and services by enabling Private Google Access on the subnet used by the VM's network interface. Besides, the security rules say no Internet access while NAt provite internet access. Google Private Access is like AWS VPC endpoint where you access GCP Public services without using Public Internet.
👍 26A_A_AB2022/01/08 - 正解だと思う選択肢: D
NAT is meant to provide access to resources on internet. While the purpose of google private access is to let VMs without external IP access other GCP resource APIs via their external IPs
👍 4KParmar2022/10/12 - 正解だと思う選択肢: D
Cloud NAT (Paid service) will work in this scenario however so will Private Google Access (which is free).
Private Google Access allows VMs with no external IP address to access publicly available Google APIs and services.
Private Google Access -> VM instances that only have internal IP addresses (no external IP addresses) can use Private Google Access. They can reach the external IP addresses of Google APIs and services.
Source - https://cloud.google.com/vpc/docs/private-google-access
👍 4Huntishi2022/12/04
シャッフルモード