Medium1 markMultiple Choice
Subtask 2.1: Network topologiesNetworkingShared VPCEnterprise Architecture

GCP PCA · Question 22 · Network topologies

Your enterprise organization has 50 different departments, each requiring their own GCP project for billing and isolation. However, the central security team mandates that all network traffic must route through a single set of firewall rules and a central VPN connection to on-premises. How should you design the network architecture?

Answer options:

A.

Create a separate VPC in each of the 50 projects and use VPC Network Peering to connect them all together.

B.

Implement a Shared VPC with a central host project and 50 service projects.

C.

Use Cloud VPN to connect all 50 projects to a central hub project.

D.

Deploy all resources for all 50 departments into a single GCP project.

How to approach this question

Identify the GCP networking feature designed for multi-project network centralization.

Full Answer

B.Implement a Shared VPC with a central host project and 50 service projects.✓ Correct
Implement a Shared VPC with a central host project and 50 service projects.
Shared VPC is the enterprise standard for centralizing network administration. It allows network admins to define subnets, routes, and firewalls in one Host Project, and allows developers to attach their VMs to those subnets from their individual Service Projects.

Common mistakes

Choosing VPC Peering (A), which is meant for connecting distinct networks, not for centralizing administration across an organization.

Practice the full GCP Professional Cloud Architect Practice Exam 6

50 questions · hints · full answers · grading

More questions from this exam