Practice Test 1 | Google Cloud Certified Professional Cloud Architect | Dumps | Mock Test
For this question, refer to the EHR Healthcare case study.
The case study explains that: EHR hosts several legacy file-based and API integrations with on-site insurance providers, which are expected to be replaced in the coming years. Hence, there is no plan to upgrade or move these systems now.
But EHR wants to use these APIs from its applications in Google Cloud so that they remain on-premise and private, securely exposing them.
In other words, EHR wants to protect these APIs and the data they process, connect them only to its VPC environment in Google Cloud, with its systems in a protected DMZ that is not accessible from the Internet. Providers will be able to access integrations only through applications and with all possible precautions.
Which technique allows you to fulfill these requirements?
A. Gated Egress and VPC Service Controls
B. Cloud Endpoint
C. Cloud VPN
D. Cloud Composer
Correct Answer: A
Gated egress topology lets APIs in on-premise environments be available only to processes inside Google Cloud without direct public internet access.
Applications in Google Cloud communicate with APIs in on-premise environments only with private IP addresses and are eventually exposed to the public via an Application Load Balancer and using VPC Service Controls.
VPC Service Controls create additional security for Cloud applications:
- Isolate services and data
- Monitor against data theft and accidental data loss
- Restrict access to authorized IPs, client context, and device parameters
- B is wrong because Cloud Endpoint is an API Gateway that could create an application facade as required. But Cloud Endpoint does not support on-premises endpoints.
- C is wrong because Cloud VPN is just a way to connect the local network to a VPC.
- D is wrong because Cloud Composer is a workflow management service.
For any further detail:
Comments are closed, but trackbacks and pingbacks are open.