Google Cloud Professional Cloud Security Engineer Practice Exam

To secure communication between two separate Google Cloud organization's Compute Engine instances, what configuration should be used?

1. VPC Peering Connection

2. Interconnect Connection

3. Cloud VPN Configuration

4. Public IP Addressing

The correct answer is: VPC Peering Connection

To secure communication between two separate Google Cloud organizations' Compute Engine instances, using a VPC Peering Connection is the most suitable configuration. VPC Peering allows you to connect two Virtual Private Cloud (VPC) networks, enabling instances in different VPCs—even if they belong to different organizations—to communicate securely and privately using internal IP addresses. This method effectively establishes a direct, private link between the networks, which keeps traffic from traversing the public internet and enhances security. Other options may not offer the same level of security or practicality for the specific scenario of inter-organizational communication. For instance, while Interconnect Connections are useful for connecting on-premises networks to Google Cloud, they do not facilitate direct communication between two separate organizations' instances. Cloud VPN Configuration can provide secure communication over the public internet, but it typically involves more complexity and overhead when compared to a direct peering connection for communication between private networks. Lastly, using Public IP Addressing exposes the instances to the internet, increasing vulnerability to attacks, and does not ensure the private communication that a VPC Peering Connection offers. Thus, for private, secure inter-organization communications, the VPC Peering Connection is the ideal choice.