Google Cloud Platform VPC and Network Security Questions

Test the candidate ability to design secure network topology and controls on Google Cloud Platform. Cover Virtual Private Cloud topology and subnetting, firewall rule strategy and least permissive network policies, private connectivity and private service endpoints, distributed denial of service protection, VPC service controls or equivalent protections to limit data exfiltration, microsegmentation for trust zones, and integration with edge protections and service meshes. Discuss trade offs in latency, manageability and fault isolation.