Examtopics

Google uses software-defined networking that enables you to subject every packet to security checks, thereby enabling complete isolation of Cloud Platform projects. Networks within projects are used to isolate groups of VM instances. Subnetworks on Compute Engine enable you to control the address space in which VM instances are created, while maintaining the ability to route between them. Firewall rules only restrict incoming network traffic. They cannot restrict outgoing network traffic. Reference: https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#use_projects_to_fully_isolate_resources