Google Exam Professional Cloud Architect Topic 4 Question 52 Discussion

Actual exam question for Google's Professional Cloud Architect exam

Question #: 52
Topic #: 4

[All Professional Cloud Architect Questions]

Your company has a networking team and a development team. The development team runs applications on Compute Engine instances that contain sensitive dat

a. The development team requires administrative permissions for Compute Engine. Your company requires all network resources to be managed by the networking team. The development team does not want the networking team to have access to the sensitive data on the instances. What should you do?

A1. Create a project with a standalone VPC and assign the Network Admin role to the networking team.
2. Create a second project with a standalone VPC and assign the Compute Admin role to the development team.
3. Use Cloud VPN to join the two VPCs.

B1. Create a project with a standalone Virtual Private Cloud (VPC), assign the Network Admin role to the networking team, and assign the Compute Admin role to the development team.

C1. Create a project with a Shared VPC and assign the Network Admin role to the networking team.
2. Create a second project without a VPC, configure it as a Shared VPC service project, and assign the Compute Admin role to the development team.

D1. Create a project with a standalone VPC and assign the Network Admin role to the networking team.
2. Create a second project with a standalone VPC and assign the Compute Admin role to the development team.
3. Use VPC Peering to join the two VPCs.

Show Suggested Answer

Suggested Answer: C

In this scenario, a large organization has a central team that manages security and networking controls for the entire organization. Developers do not have permissions to make changes to any network or security settings defined by the security and networking team but they are granted permission to create resources such as virtual machines in shared subnets. To facilitate this the organization makes use of a shared VPC (Virtual Private Cloud). A shared VPC allows creation of a VPC network of RFC 1918 IP spaces that associated projects (service projects) can then use. Developers using the associated projects can create VM instances in the shared VPC network spaces. The organization's network and security admins can create subnets, VPNs, and firewall rules usable by all the projects in the VPC network. https://cloud.google.com/iam/docs/job-functions/networking#single_team_manages_security_network_for_organization

by Katina at Jun 13, 2022, 05:08 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!