Why advanced networking matters in GCP - Challenge Your Understanding

Challenge - 5 Problems

🧠 Conceptual

intermediate

Why use Virtual Private Cloud (VPC) in GCP?

Which of the following best explains why Virtual Private Cloud (VPC) is important in Google Cloud Platform networking?

A VPC provides a graphical interface to manage billing and user accounts.

B VPC is a storage service that backs up your data across regions.

C VPC allows you to isolate your cloud resources in a private network, controlling traffic and improving security.

D VPC automatically scales your compute instances without any configuration.

💡 Hint

Think about how you keep your home safe and private from strangers.

A Virtual Private Cloud (VPC) creates a private network in the cloud where you can place your resources securely. It controls how data moves in and out, just like a fence around your house.

❓ service_behavior

intermediate

What happens when you enable Private Google Access?

In GCP, what is the effect of enabling Private Google Access on a subnet?

A Instances without external IPs can access Google APIs and services privately without using the public internet.

B Instances can only communicate within the subnet and cannot reach any external services.

C All traffic from the subnet is blocked from accessing Google services.

D Instances gain automatic public IP addresses for internet access.

💡 Hint

Think about how you might access a service inside your home network without going outside.

Private Google Access allows instances without public IPs to reach Google APIs and services through Google's private network, avoiding the public internet.

❓ Architecture

advanced

Designing a multi-region VPC network

You want to design a VPC network that spans multiple GCP regions to support a global application with low latency and high availability. Which architecture best achieves this?

A Create a single global VPC with subnets in each region and use Cloud VPN or Cloud Interconnect to connect on-premises networks.

B Create separate VPCs in each region and connect them using VPC peering to allow internal communication.

C Use only one region with a large subnet and rely on global load balancing to serve all users.

D Create multiple VPCs in each region without any peering or interconnection.

💡 Hint

Think about how a single network can cover many locations while staying connected.

A global VPC with subnets in multiple regions allows resources to communicate securely and efficiently. Cloud VPN or Interconnect connects on-premises networks to this global VPC.

❓ security

advanced

Securing GCP workloads with firewall rules

Which firewall rule configuration best restricts access to a GCP VM instance to only trusted IP addresses?

A Create an ingress firewall rule allowing traffic from any IP address on all ports.

B Create an egress firewall rule allowing traffic to all IP addresses.

C Disable all firewall rules to avoid conflicts.

D Create an ingress firewall rule allowing traffic only from the trusted IP ranges and deny all other ingress traffic.

💡 Hint

Think about locking your front door and only letting in people you know.

Ingress firewall rules control incoming traffic. Allowing only trusted IP ranges and denying others protects the VM from unwanted access.

✅ Best Practice

expert

Optimizing network performance with Cloud CDN and Load Balancing

You have a global web application hosted on GCP. To reduce latency and improve user experience worldwide, which combination of services should you use?

A Use only regional Load Balancers without caching to keep traffic local.

B Use Cloud CDN with a global HTTP(S) Load Balancer to cache content at edge locations and distribute traffic efficiently.

C Use Cloud VPN to connect all users directly to the backend instances.

D Use Cloud Storage buckets in a single region to serve all content.

💡 Hint

Think about how a popular website serves content quickly to users everywhere.

Cloud CDN caches content close to users at edge locations, while a global HTTP(S) Load Balancer routes traffic efficiently to backend instances, reducing latency.