Network architecture design
A comparison of the 4 GCP enterprise network topology options — Shared VPC, hub-and-spoke, Private Service Connect — and the trade-offs between NCC, Peering and VPN.
Hybrid connectivity
Comparing Cloud VPN, Dedicated Interconnect, Partner Interconnect and Cross-Cloud Interconnect on bandwidth, SLA and best-fit scenarios.
Private access and Cloud DNS
The difference between Private Google Access and Private Service Connect, and how to design a centralised DNS hub (DNS forwarding / DNS peering).
Cloud NAT
Once external IPs are disabled on VMs, use Google's fully managed, distributed Cloud NAT to keep outbound internet access for package updates working.
Firewall management
The differences between hierarchical firewall policies, network firewall policies and legacy VPC firewall rules, and designing a baseline rule set for micro-segmentation.