Google Professional Cloud Network Engineer Question 221
Select 3Google Cloud PlatformYou are a network engineer for a company that uses Google Cloud. The company wants to centralize network management by creating a Shared VPC network in a host project and sharing subnets with multiple service projects. Which of the following steps are necessary to achieve this?
- A
Enable the Shared VPC feature in the host project.
- B
Grant the 'Compute Network User' IAM role to service project administrators for the shared subnets.
- C
Create a firewall rule in the host project to allow service projects to access subnets.
- D
Attach the service projects to the host project as service project members.
- E
Create separate VPC networks in each service project and link them to the host project.
Show answer and explanation
Correct answers: A, B, D
Explanation
To set up a Shared VPC, you need to enable the Shared VPC feature in the host project, attach service projects to the host project, and configure IAM roles like 'Compute Network User' to allow service project users to access shared subnets. Separate VPC networks or additional firewall rules are not required for the sharing process.
- A. Correct.
Correct. Enabling the Shared VPC feature in the host project is the first step to creating a Shared VPC network.
- B. Correct.
Correct. The 'Compute Network User' IAM role must be granted to service project administrators to allow them to use the shared subnets in their respective projects.
- C. Incorrect.
Incorrect. Firewall rules are not necessary to share subnets; they are used to control network traffic. Subnet sharing is handled through IAM roles and Shared VPC configuration.
- D. Correct.
Correct. Service projects must be attached to the host project in order to share resources like subnets.
- E. Incorrect.
Incorrect. Separate VPC networks in each service project are not required for Shared VPC. Instead, service projects use subnets from the host project’s Shared VPC network.