Google Cloud Digital LeaderInfrastructure modernization with Google CloudMedium
A software development company is building a new application that will be deployed as a set of microservices. They need to ensure that these microservices can communicate with each other securely and privately, without exposing internal traffic to the public internet. Additionally, they require granular control over network policies between different microservices and the ability to connect to on-premises resources via a secure tunnel. Which Google Cloud networking product would provide these capabilities?
- ACloud VPN
- BCloud CDN
- CVirtual Private Cloud (VPC)
- DCloud Load Balancing
Show answer & explanationAnswer & explanation
Correct answer: C. Virtual Private Cloud (VPC)
Virtual Private Cloud (VPC) provides a private, isolated network in Google Cloud where resources like microservices can communicate securely. It allows granular control over network policies (firewall rules) and can be extended to on-premises networks via Cloud VPN or Interconnect, fulfilling all the requirements.
Why the other options are wrong
- A. Cloud VPN connects on-premises networks to Google Cloud, but it's a component of VPC, not the full solution for internal microservice communication and policy control.
- B. Cloud CDN (Content Delivery Network) is used for caching and delivering web content globally, not for internal private network communication.
- D. Cloud Load Balancing distributes traffic to instances but doesn't provide private networking or granular network controls between microservices.
Virtual Private Cloud (VPC)
A global, private network in Google Cloud that provides networking functionality for Google Cloud resources. It allows you to define a virtual network topology, including IP address ranges, subnets, routes, and firewalls.
- Globally distributed private network
- Supports secure internal communication
- Granular firewall rules for network control
- Connects to on-premises via VPN/Interconnect
Memory trick: Networking needs a 'VPC' as its 'Core' for security and 'Control'.