You are configuring an HA VPN connection between your Virtual Private Cloud (VPC) and on- premises network. The VPN gateway is named VPN_GATEWAY_1. You need to restrict VPN tunnels created in the project to only connect to your on-premises VPN public IP address:
203.0.113.1/32.
What should you do?

You manage a Google Kubernetes Engine (GKE) cluster that needs to communicate with a legacy monitoring service running in your on-premises data center. The on-premises network uses the 192.168.10.0/24 address range and is connected to your VPC through Cloud VPN. The legacy monitoring service can only accept traffic from the GKE clusters' node IP addresses, not from Pod IP addresses. You notice that traffic from Pods is failing. You need to ensure that traffic from Pods can seamlessly flow to the on-premises network. What should you do?

Your company's web server administrator is migrating on-premises backend servers for an application to GCP. Libraries and configurations differ significantly across these backend servers.
The migration to GCP will be lift-and-shift, and all requests to the servers will be served by a single network load balancer frontend. You want to use a GCP-native solution when possible.
How should you deploy this service in GCP?

You are a admin at XYZ organization. Few of your team members need to use BigQuery Data Transfer Service for Amazon S3 . They want to automatically schedule and manage recurring load jobs from Amazon S3 into BigQuery, they want to run the transfer job every week. They have, Amazon S3 URI for the source data, access key ID , secret access key and Read permission on the data source . What necessary permissions are required for the transfer job creators in BigQuery .

You are responsible for configuring firewall policies for your company in Google Cloud. Your security team has a strict set of requirements that must be met to configure firewall rules.
- Always allow Secure Shell (SSH) from your corporate IP address.
- Restrict SSH access from all other IP addresses.
There are multiple projects and VPCs in your Google Cloud organization.
You need to ensure that other VPC firewall rules cannot bypass the security team's requirements.
What should you do?