Google Cloud Associate Cloud Engineer — Question 258

You need to deploy a single stateless web application with a web interface and multiple endpoints. For security reasons, the web application must be reachable from an internal IP address from your company's private VPC and on-premises network. You also need to update the web application multiple times per day with minimal effort and want to manage a minimal amount of cloud infrastructure. What should you do?

Answer options

• A. Deploy the web application on Google Kubernetes Engine standard edition with an internal ingress.
• B. Deploy the web application on Cloud Run with Private Google Access configured.
• C. Deploy the web application on Cloud Run with Private Service Connect configured.
• D. Deploy the web application to GKE Autopilot with Private Google Access configured.

Correct answer: C

Explanation

The correct answer is C because deploying on Cloud Run with Private Service Connect allows the application to be accessed securely from your private VPC, facilitating internal IP access while simplifying management and updates. Option A is incorrect as GKE standard edition may involve more infrastructure management. Option B does not provide the necessary internal connectivity configuration, while option D, although it uses GKE Autopilot, still requires more management than Cloud Run.