Google Professional Data Engineer
Comments
Loading comments...
Ultimate access to all questions.
You are developing an Apache Beam pipeline to extract data from a Cloud SQL instance by using JdbcIO. The pipeline will be deployed and executed on Google Cloud Dataflow in Project A, while the Cloud SQL instance is hosted in Project B, and it does not have a public IP address. After deploying the pipeline, you observe that it fails to extract data from the Cloud SQL instance due to a connection failure. Upon investigation, you confirm that neither VPC Service Controls nor a shared VPC are in use within these projects. To resolve this connection error and ensure that the data does not traverse the public internet, what should you do?
A
Set up VPC Network Peering between Project A and Project B. Add a firewall rule to allow the peered subnet range to access all instances on the network.
B
Turn off the external IP addresses on the Dataflow worker. Enable Cloud NAT in Project A.
C
Add the external IP addresses of the Dataflow worker as authorized networks in the Cloud SQL instance.
D
Set up VPC Network Peering between Project A and Project B. Create a Compute Engine instance without external IP address in Project B on the peered subnet to serve as a proxy server to the Cloud SQL database.