Google Cloud Professional Cloud Network Engineer — Question 93

Your company has a single Virtual Private Cloud (VPC) network deployed in Google Cloud with access from on-premises locations using Cloud Interconnect connections. Your company must be able to send traffic to Cloud Storage only through the Interconnect links while accessing other Google APIs and services over the public internet. What should you do?

Answer options

• A. Use the default public domains for all Google APIs and services.
• B. Use Private Service Connect to access Cloud Storage, and use the default public domains for all other Google APIs and services.
• C. Use Private Google Access, with restricted.googleapis.com virtual IP addresses for Cloud Storage and private.googleapis.com for all other Google APIs and services.
• D. Use Private Google Access, with private.googleapis.com virtual IP addresses for Cloud Storage and restricted.googleapis.com virtual IP addresses for all other Google APIs and services.

Correct answer: B

Explanation

The correct answer is B because Private Service Connect allows for a private connection to Cloud Storage through the Interconnect, while still using public domains for other APIs. Option A does not restrict Cloud Storage traffic to the Interconnect, and options C and D incorrectly configure the IP addresses for Google APIs, thus not fulfilling the requirement of accessing Cloud Storage solely through the Interconnect links.