Google Cloud Associate Cloud Engineer ACE — Topic 1 Question 321

Question

You are deploying a large, multi-tiered application with more than 1,000 IP addresses in a Google Cloud project that needs to be securely isolated. The application includes the: 1. web tier with frontend servers for public traffic, 2. application tier with servers running core application logic that only need access from the web tier, and 3. database tier with database servers that only need access from the application tier. You want to minimize cost, complexity, and administrative overhead in the network architecture. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create one custom mode /16 VPC with three subnets. Place each tier in its own subnet and use firewall rules that reference IP subnets to control traffic. A VPC provides a global, software-defined private network for your Google Cloud resources. This option delivers the requirement at the lowest cost.

Google Cloud Associate Cloud Engineer ACE — Question 321