Google Associate Cloud EngineerDeploying and implementing a cloud solutionHard
A financial institution needs to deploy a highly secure and compliant application on Google Cloud. This application processes sensitive customer data and requires a dedicated, private, and high-bandwidth connection between their on-premises data center and their Google Cloud VPC network, bypassing the public internet entirely. Which Google Cloud networking product should they choose?
- ACloud Router
- BCloud VPN
- CVPC Network Peering
- DCloud Interconnect (Dedicated)
Show answer & explanationAnswer & explanation
Correct answer: D. Cloud Interconnect (Dedicated)
Cloud Interconnect (Dedicated) provides a direct, private, high-bandwidth connection between an on-premises data center and Google Cloud. It bypasses the public internet, offering enhanced security, compliance, and predictable performance, which is critical for sensitive financial applications.
Why the other options are wrong
- A. Cloud Router is a component used with Cloud VPN and Cloud Interconnect for BGP routing, not a standalone connectivity solution itself.
- B. Cloud VPN uses encrypted tunnels over the public internet, which does not meet the requirement of bypassing the public internet entirely for sensitive data.
- C. VPC Network Peering connects two Google Cloud VPC networks, not an on-premises data center to Google Cloud.
Google Cloud Interconnect (Dedicated)
A physical, direct connection between an on-premises network and Google Cloud, bypassing the public internet.
- Offers high bandwidth and low latency.
- Provides enhanced security and compliance by avoiding the public internet.
- Requires physical provisioning and a Google Cloud partner or colocation facility.
Memory trick: To 'interconnect' your private 'cloud' with Google, 'dedicated' means *no public internet*.