Google Cloud Professional Cloud Network Engineer — Question 127

You have several microservices running in a private subnet in an existing Virtual Private Cloud (VPC). You need to create additional serverless services that use Cloud Run and Cloud Functions to access the microservices. The network traffic volume between your serverless services and private microservices is low. However, each serverless service must be able to communicate with any of your microservices. You want to implement a solution that minimizes cost. What should you do?

Answer options

• A. Deploy your serverless services to the serverless VPC. Peer the serverless service VPC to the existing VPC. Configure firewall rules to allow traffic between the serverless services and your existing microservices.
• B. Create a serverless VPC access connector for each serverless service. Configure the connectors to allow traffic between the serverless services and your existing microservices.
• C. Deploy your serverless services to the existing VPConfigure firewall rules to allow traffic between the serverless services and your existing microservices.
• D. Create a serverless VPC access connector. Configure the serverless service to use the connector for communication to the microservices.

Correct answer: D

Explanation

The correct answer is D because creating a serverless VPC access connector allows serverless services to securely communicate with private microservices without incurring the costs of deploying them in a separate VPC. Option A is unnecessary as peering would add complexity and cost. Option B involves multiple connectors, which may not be cost-effective, while option C lacks the necessary configuration to facilitate communication without additional connectors.