Google Associate Cloud EngineerPlanning and configuring a cloud solutionHard
An application requires a dedicated, single-tenant environment for regulatory compliance and specific licensing requirements that prevent multi-tenancy. The application will be deployed on Compute Engine VMs. What type of Compute Engine resource should be used to meet these requirements?
- AStandard VMs in a custom network
- BPreemptible VMs with custom machine types
- CManaged instance groups
- DSole-tenant nodes
Show answer & explanationAnswer & explanation
Correct answer: D. Sole-tenant nodes
Sole-tenant nodes provide dedicated physical servers that host only your project's VMs. This ensures physical isolation from other Google Cloud projects, meeting strict regulatory compliance and licensing requirements for single-tenancy.
Why the other options are wrong
- A. Standard VMs run on shared physical infrastructure, even in a custom network, not providing the physical isolation needed for single-tenancy requirements.
- B. Preemptible VMs are for cost-saving on interruptible workloads and still run on shared physical infrastructure, not addressing dedicated tenancy.
- C. Managed instance groups are for scaling and managing groups of VMs, but the underlying VMs still run on shared infrastructure unless explicitly configured with sole-tenant nodes.
Compute Engine Sole-Tenant Nodes
Dedicated physical servers within Google Cloud that are allocated exclusively to your project. They allow you to run your Compute Engine VMs on isolated hardware, meeting specific compliance, security, or licensing requirements for single-tenancy.
- Dedicated physical servers
- Ensures single-tenancy and physical isolation
- Addresses specific compliance and licensing needs
- Offers control over host maintenance events
- More expensive than standard VMs
Memory trick: VM Isolation: If your app needs its 'own room', pick the 'key' that fits!