PCDE Memorystore for Redis Practice Question
A developer is setting up a Memorystore for Redis instance and needs to restrict access to only a specific Compute Engine VM in the same VPC network. Which configuration should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the Memorystore instance with a firewall rule that allows only the VM's internal IP
Memorystore for Redis uses Private Service Access and requires authorizing a VPC network to access the instance. After authorizing the VPC network, you can restrict access to a specific Compute Engine VM by applying a firewall rule in that VPC that allows traffic from only that VM's internal IP to the Memorystore instance. This is the most granular control available without using additional authentication like AUTH.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use Cloud Armor to whitelist the VM's external IP
Why it's wrong here
Cloud Armor is not compatible with Memorystore (it's for HTTP(S) load balancing).
- ✗
Use the AUTH password and share it only with the VM
Why it's wrong here
AUTH password controls client authentication, but does not restrict network-level access.
- ✓
Configure the Memorystore instance with a firewall rule that allows only the VM's internal IP
Why this is correct
Correct. Firewall rules can be applied to the VPC to restrict inbound traffic to the Memorystore instance's IP range from only the VM's IP.
- ✗
Place the Redis instance in a separate VPC and peer only with the VM's VPC
Why it's wrong here
Memorystore uses Private Service Access; it cannot be placed in a separate VPC that is not the service producer.
Go deeper
Related to this question
About these practice questions
One of 1,446 original PCDE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCDE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCDE exam.