Google Professional Cloud DevOps Engineer Question 182
Select 3Google Cloud PlatformYour organization has multiple projects within a Google Cloud Organization. To simplify network management and ensure standardized configurations, you decide to implement shared VPC. Which of the following statements are true about shared VPC and its setup in Google Cloud?
- A
A shared VPC allows you to share subnets across multiple projects within the same Google Cloud Organization.
- B
Only one host project is allowed in a shared VPC setup.
- C
Service projects can utilize the shared VPC network resources, such as subnets, without owning them.
- D
Shared VPC requires that all service projects must be in the same region as the host project.
- E
Shared VPC administrators can control which service accounts or IAM roles have access to the network resources.
Show answer and explanation
Correct answers: A, C, E
Explanation
Shared VPC in Google Cloud enables centralized network management by sharing network resources such as subnets across multiple projects within the same organization. Service projects can leverage the shared resources without owning them, and administrators can control access using IAM roles. However, there are no restrictions on the number of host projects or the regionality of service projects in a shared VPC setup.
- A. Correct.
This is correct. Shared VPC allows you to share subnets across multiple projects within the same Google Cloud Organization, enabling centralized network management.
- B. Incorrect.
This is incorrect. A shared VPC can have multiple host projects, though each service project can only be connected to one host project at a time.
- C. Correct.
This is correct. Service projects can use the network resources (e.g., subnets, firewalls) from the host project without owning them, as long as permissions are properly configured.
- D. Incorrect.
This is incorrect. Shared VPC does not impose regional restrictions. Service projects can be in different regions from the host project as long as they are part of the same Google Cloud Organization.
- E. Correct.
This is correct. Shared VPC administrators can manage access to the shared network resources by assigning IAM roles, ensuring proper governance and security.