Municipal permitting and payment workloads are moving into a virtual private cloud. Planners need subnetting, gateways, and isolation that match sensitivity. Which VPC design principle is most appropriate?
Select an answer to reveal the explanation.
Short Explanation
A VPC isn’t automatically safe just because it’s 'in the cloud'—it’s a neighborhood you still have to zone. Keep public entry points small, tuck sensitive payment stuff in private space, and don’t give every app a freeway to every other app.
Full Explanation
Virtual Private Cloud secure architecture uses subnet tiers, controlled Internet and NAT gateways, and deliberate isolation between application sensitivity levels. Public-facing components should be minimized; databases and payment processing typically remain private with tightly mediated access. Flat or fully transitive designs increase blast radius and contradict least-privilege network zoning expected in CISSP-level cloud network design.