You Are Using a Third-Party Next-Generation Firewall to Inspect Traffic

question 25

Multiple Choice

You are using a third-party next-generation firewall to inspect traffic. You created a custom route of 0.0.0.0/0 to route egress traffic to the firewall. You want to allow your VPC instances without public IP addresses to access the BigQuery and Cloud Pub/Sub APIs, without sending the traffic through the firewall. Which two actions should you take? (Choose two.)

• A) Turn on Private Google Access at the subnet level.
• B) Turn on Private Google Access at the VPC level.
• C) Turn on Private Services Access at the VPC level.
• D) Create a set of custom static routes to send traffic to the external IP addresses of Google APIs and services via the default internet gateway.
• E) Create a set of custom static routes to send traffic to the internal IP addresses of Google APIs and services via the default internet gateway.

---

Definitions:

Differential Illegitimate Opportunity

A concept within criminology that explains variations in the rates of deviance among different social groups due to unequal access to legitimate means of achieving success.

Anomie-Strain Theory

A concept in criminology that explores the disconnect between societal goals and the availability of legitimate means to achieve those goals, leading to deviance.

Deviant Behavior

Actions or behaviors that violate societal norms or expectations, which can include criminal acts as well as non-criminal acts that are not aligned with societal standards.

Social Control

Mechanisms, both formal and informal, that regulate individual and group behavior, aiming to conform to the norms and laws of society.