Câu 3: Google Cloud Professional Cloud Network Engineer

In order to provide subnet level isolation, you want to force instance-A in one subnet to route through a security appliance, called instance-B, in another subnet. What should you do?

1. A. Create a more specific route than the system-generated subnet route, pointing the next hop to instance-B with no tag.
2. B. Create a more specific route than the system-generated subnet route, pointing the next hop to instance-B with a tag applied to instance-A. — đáp án hiện tại
3. C. Delete the system-generated subnet route and create a specific route to instance-B with a tag applied to instance-A.
4. D. Move instance-B to another VPC and, using multi-NIC, connect instance-B's interface to instance-A's network. Configure the appropriate routes to force traffic through to instance-A.