Ultimate access to all questions.
You have an application with a frontend deployed on a managed instance group in subnet A and a backend MySQL database running on a Compute Engine VM in subnet B within the same VPC. Both subnets contain other Compute Engine VMs. You need to ensure that only the application frontend can access the MySQL instance on port 3306. What should you do?