Google Cloud Professional Cloud Network Engineer PCNE — Topic 1 Question 195

Question

Your company deployed Cloud Next Generation Firewall Enterprise (Cloud NGFW Enterprise). You have already created a CA pool and a CA in Certificate Authority Service. You need to enable TLS inspection. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Grant the network security service agent service account the privateca.certificateRequester role. Create a TLS inspection policy linking to the CA pool. Configure your VPC endpoint associations to use the TLS inspecti... A VPC provides a global, software-defined private network for your Google Cloud resources. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Network Engineer PCNE — Question 195