Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 122

Question

Your organization acquired a new workload. The Web and Application (App) servers will be running on Compute Engine in a newly created custom VPC. You are responsible for configuring a secure network communication solution that meets the following requirements: • Only allows communication between the Web and App tiers. • Enforces consistent network security when autoscaling the Web and App tiers. • Prevents Compute Engine Instance Admins from altering network traffic. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: 1. Re-deploy the Web and App servers with instance templates configured with respective service accounts. 2. Create an allow VPC firewall rule that specifies the target/source with respective service accounts. A VPC provides a global, software-defined private network for your Google Cloud resources. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Security Engineer PCSE — Question 122