Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 300

Question

You work for an ecommerce company that stores sensitive customer data across multiple Google Cloud regions. The development team has built a new 3-tier application to process orders and must integrate the application into the production environment. You must design the network architecture to ensure strong security boundaries and isolation for the new application, facilitate secure remote maintenance by authorized third-party vendors, and follow the principle of least privilege. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create separate VPC networks for each tier. Use VPC peering between application tiers and other required VPCs. Enable Identity-Aware Proxy (IAP) for remote access to management resources, limiting access to authorized... VPC Network Peering privately connects two VPC networks without a gateway. A VPC provides a global, software-defined private network for your Google Cloud resources. Identity-Aware Proxy enforces per-request access control to apps without a VPN.

Google Cloud Professional Cloud Security Engineer PCSE — Question 300