Google Professional Cloud Network Engineer Question 151
Single answerGoogle Cloud PlatformYour organization has set up a VPC Network Peering connection between two VPCs: 'VPC-A' and 'VPC-B'. You want instances in 'VPC-B' to access a Google-managed service (e.g., Cloud SQL) deployed in 'VPC-A' using Private Service Access. However, the instances in 'VPC-B' cannot connect to the service. What is the most likely reason for this issue?
- A
VPC Network Peering does not allow access to Google-managed services between peered VPCs.
- B
Private Service Access is not enabled in 'VPC-A'.
- C
The necessary routes for the Google-managed service's IP range have not been shared with 'VPC-B' through VPC Network Peering.
- D
Firewall rules in 'VPC-B' are blocking traffic to the Google-managed service's IP range.
Show answer and explanation
Correct answer: A
Explanation
VPC Network Peering enables private communication between VPCs but does not support accessing Google-managed services (e.g., Cloud SQL via Private Service Access) across peered VPCs. In this scenario, 'VPC-B' cannot access the service in 'VPC-A' because Google-managed services are not accessible over VPC Network Peering. To resolve this, consider alternatives such as setting up a Shared VPC or using Service Networking to establish the required connectivity.
- A. Correct.
Correct. VPC Network Peering does not allow access to Google-managed services (e.g., Private Service Access) between peered VPCs. Google-managed services are not automatically accessible over VPC Network Peering, and additional configurations, such as Shared VPCs or Service Networking, are required.
- B. Incorrect.
Incorrect. Private Service Access being enabled in 'VPC-A' is not enough to allow access to Google-managed services from a peered VPC like 'VPC-B'.
- C. Incorrect.
Incorrect. Routes for Google-managed services' IP ranges are not shared across VPC Network Peering connections by default, and this is not configurable.
- D. Incorrect.
Incorrect. While firewall rules can block traffic, the issue in this scenario is related to the limitations of VPC Network Peering with Google-managed services.