Google Professional Cloud Network Engineer Question 215
Select 3Google Cloud PlatformYou are designing a Google Cloud architecture for a company that requires a private connection to Google APIs and services. The company also needs a secure, isolated network for their workloads and plans to use a custom VPC. As part of the setup, you need to configure private access for Google services. Which of the following steps are required to achieve this?
- A
Create a custom VPC and configure a private services access subnet
- B
Enable the 'Private Google Access' option on the subnet
- C
Create a Cloud NAT gateway for the subnet to route traffic to Google services
- D
Configure a firewall rule to allow egress traffic to Google APIs
- E
Create a peering connection between the VPC and Google services using private services access
Show answer and explanation
Correct answers: A, B, E
Explanation
To enable private access to Google APIs and services, you must create a custom VPC with a private services access subnet, enable 'Private Google Access' on the subnet, and set up a private services access peering connection. This ensures that all traffic to Google APIs remains secure and does not traverse the public internet. A Cloud NAT gateway or specific firewall rules are not required for this configuration.
- A. Correct.
Correct. To use private Google services, you must create a custom VPC and define a private services access subnet with an allocated IP range.
- B. Correct.
Correct. Enabling 'Private Google Access' on the subnet allows instances to connect to Google APIs and services privately.
- C. Incorrect.
Incorrect. A Cloud NAT gateway is not required to enable private access to Google services when 'Private Google Access' is enabled.
- D. Incorrect.
Incorrect. While firewall rules are essential for security, they are not specifically required to enable private access to Google services.
- E. Correct.
Correct. A peering connection using private services access is needed to establish private connectivity to Google APIs and services.