Google Cloud Associate Cloud Engineer — Question 86

You have successfully created a development environment in a project for an application. This application uses Compute Engine and Cloud SQL. Now you need to create a production environment for this application. The security team has forbidden the existence of network routes between these 2 environments and has asked you to follow Google-recommended practices. What should you do?

Answer options

• A. Create a new project, enable the Compute Engine and Cloud SQL APIs in that project, and replicate the setup you have created in the development environment.
• B. Create a new production subnet in the existing VPC and a new production Cloud SQL instance in your existing project, and deploy your application using those resources.
• C. Create a new project, modify your existing VPC to be a Shared VPC, share that VPC with your new project, and replicate the setup you have in the development environment in that new project in the Shared VPC.
• D. Ask the security team to grant you the Project Editor role in an existing production project used by another division of your company. Once they grant you that role, replicate the setup you have in the development environment in that project.

Correct answer: A

Explanation

The correct answer is A because creating a new project and enabling the necessary APIs ensures complete separation between the development and production environments, aligning with the security team's requirements. Options B and C violate the security team's mandate by potentially allowing network routes between environments, while option D relies on permissions that compromise operational independence and security protocols.