Google Professional Cloud Network Engineer

Your fintech company is building a multi-environment landing zone with the following constraints: • The PCI-compliant Live tier and the Test/Sandbox tier must be completely isolated so that no network communication is possible between them. • Within each tier, services may need to communicate with each other. • A central network team must manage all networking artifacts (subnets, routes, firewall rules) from a single place per tier. • Each microservice must be billed separately for cost allocation and budgets. • Application teams need autonomy to create their compute resources (VMs, GKE clusters), but must not be able to create or modify networking resources. • The design must scale to support up to 1,000 microservices per tier. You need to propose a design that satisfies these requirements. What should you do?