google · Professional-Cloud-Database-Engineer · Q424 · multiple_choice · topic_1

You are developing a new application on a VM that is on your corporate network. The application will use Java Database…

You are developing a new application on a VM that is on your corporate network. The application will use Java Database Connectivity (JDBC) to connect to Cloud SQL for PostgreSQL. Your Cloud SQL instance is configured with IP address 192.168.3.48, and SSL is disabled. You want to ensure that your application can access your database instance without requiring configuration changes to your database. What should you do?

A.Define a connection string using your Google username and password to point to the external (public) IP address of your Cloud SQL instance.
B.Define a connection string using a database username and password to point to the internal (private) IP address of your Cloud SQL instance.
C.Define a connection string using Cloud SQL Auth proxy configured with a service account to point to the internal (private) IP address of your Cloud SQL instance.
D.Define a connection string using Cloud SQL Auth proxy configured with a service account to point to the external (public) IP address of your Cloud SQL instance.

Explanation

Option B is the best choice. By using the internal (private) IP address of the Cloud SQL instance, the traffic will stay within the corporate network and will not traverse the public internet. This will help to ensure that the traffic is secure and cannot be intercepted by unauthorized parties. Additionally, using the internal IP address does not require any additional configuration changes to the database instance. Option A is not recommended as it requires exposing the database instance's external (public) IP address, which can be less secure and may require additional firewall rules. Option C is a valid option if SSL is enabled on the Cloud SQL instance, but since SSL is disabled in this scenario, this option is not suitable. Option D is not recommended as it requires exposing the database instance's external (public) IP address, which can be less secure and may require additional firewall rules.

Reference: examtopics_top_comment

Practice with progress tracking

Start tracked practice Pricing