Examkin

Question

Difficulty: EasyDeploying and Configuring Managed Database Instances

A cloud engineer is creating a new Cloud SQL for MySQL instance. To ensure the database is accessible to internal workloads in the Virtual Private Cloud (VPC) while preventing all direct access from the public internet, which network configuration should be applied during deployment?

  1. Enable Private IP connectivity and associate the instance with the target VPC network.Answer
  2. B
    Enable Public IP access and add the CIDR range 0.0.0.0/0 to the authorized networks list.
  3. C
    Deploy the database on a Cloud Bigtable instance configured with public endpoints.
  4. D
    Provision the database using a Spot VM compute profile on a public subnet.

Answer

Enable Private IP connectivity and associate the instance with the target VPC network.
Enabling Private IP assigns a private IP address from the designated VPC network to the Cloud SQL instance, ensuring traffic remains private within Google Cloud without internet exposure.

Step-by-Step Solution

1
Analyze the network isolation requirement.
The requirement specifies allowing internal VPC communication while blocking public internet exposure.
Direct public exposure creates unnecessary security risk for internal database workloads.
2
Select the secure deployment option for Cloud SQL.
Configuring Private IP attaches the managed database to the internal VPC network.
Private Services Access isolates database traffic from external routing.

Key Concept

Configuring Private IP for Managed Database Instances
Rate this question

Topics

Deploying and Configuring Managed Database Instances