Cloud SQL Proxy for secure connections in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main purpose of the Cloud SQL Proxy?

The Cloud SQL Proxy helps applications connect securely to Cloud SQL databases without managing IP allowlists or SSL certificates manually.

beginner

How does Cloud SQL Proxy authenticate connections to Cloud SQL?

It uses the credentials of the Google Cloud service account or user to authenticate securely with Cloud SQL instances.

intermediate

Which network protocol does Cloud SQL Proxy use to connect to Cloud SQL instances?

Cloud SQL Proxy uses secure TLS connections over TCP to connect to Cloud SQL instances.

intermediate

What is a key benefit of using Cloud SQL Proxy compared to direct IP connections?

It removes the need to open database ports to the public internet, reducing exposure and improving security.

advanced

Can Cloud SQL Proxy be used with multiple Cloud SQL instances simultaneously?

Yes, Cloud SQL Proxy can manage connections to multiple Cloud SQL instances at the same time using different instance connection names.

What does Cloud SQL Proxy eliminate the need for when connecting to Cloud SQL?

A Managing IP allowlists and SSL certificates

B Using service accounts

C Creating database users

D Writing SQL queries

Cloud SQL Proxy handles secure connections without requiring manual IP allowlists or SSL certificate management.

Which of the following is true about Cloud SQL Proxy authentication?

A It uses Google Cloud credentials for authentication

B It requires manual password entry every time

C It uses SSH keys for authentication

D It does not authenticate connections

Cloud SQL Proxy authenticates using Google Cloud service account or user credentials.

What type of connection does Cloud SQL Proxy establish to Cloud SQL instances?

A FTP

B Unencrypted HTTP

C TLS encrypted TCP

D UDP

Cloud SQL Proxy uses TLS encrypted TCP connections to secure data in transit.

Why is using Cloud SQL Proxy considered more secure than direct IP connections?

A It requires less bandwidth

B It avoids exposing database ports publicly

C It uses a faster protocol

D It stores passwords locally

Cloud SQL Proxy avoids opening database ports to the public internet, reducing attack surface.

Can Cloud SQL Proxy connect to multiple Cloud SQL instances at once?

A No, only one instance at a time

B Only if instances are in the same region

C Only with manual configuration per instance

D Yes, using different instance connection names

Cloud SQL Proxy supports simultaneous connections to multiple instances using their unique connection names.

Explain how Cloud SQL Proxy improves security when connecting to Cloud SQL databases.

Think about what risks are reduced by using the proxy.

Describe the authentication process Cloud SQL Proxy uses to connect to Cloud SQL instances.

Focus on how identity is verified automatically.