Google Associate Cloud Engineer (ACE)

Access More Questions

In your own data center, bare-metal servers are hosting an application. Cloud storage must be accessible to the application. Security regulations, however, forbid the servers hosting the application from having available IP addresses or internet access. It would help if you stuck to Google's advice to grant the application access to cloud storage. What ought you to do?

1. Use nslookup to get the IP address for storage.googleapis.com 2. Negotiate with the security team to allow the servers to have a public IP address. 3. Only permit egress traffic from those servers to storage.googleapis.com's IP addresses 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud 2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance 3. Configure your servers to use that instance as a proxy to access Cloud Storage 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in Google Cloud 2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel 3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine 2. Create an internal load balancer (ILB) that uses storage.googleapis.com as a backend 3. Configure your new instances to use this ILB as a proxy

Correct Answer:

1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine 2. Create an internal load balancer (ILB) that uses storage.googleapis.com as a backend 3. Configure your new instances to use this ILB as a proxy

Access more questions from this quiz

Continue to Google Associate Cloud Engineer (ACE) for more practice questions and the full quiz experience.

Access More Questions