Google Professional Cloud Network Engineer Question 223
Select 3Google Cloud PlatformYou are a Network Engineer for a company planning to implement a Shared VPC in Google Cloud. Your company has multiple projects, and you need to share subnets from a host project with service projects to allow resources in the service projects to use these subnets. Which of the following steps are required to set up and use the Shared VPC correctly?
- A
Enable the Shared VPC feature in the host project and designate it as the Shared VPC host.
- B
Grant the 'Compute Shared VPC Admin' IAM role to users who need to manage the Shared VPC configuration.
- C
Attach the service projects to the host project by enabling the Shared VPC feature in the service projects.
- D
Grant the 'Compute Network User' IAM role on the subnets in the host project to service project members who need to create resources in the shared subnets.
- E
Create a custom firewall rule in each service project to allow communication between resources in the Shared VPC.
Show answer and explanation
Correct answers: A, B, D
Explanation
Setting up a Shared VPC in Google Cloud involves designating a host project where the Shared VPC is configured, enabling the Shared VPC feature in that project, and granting appropriate IAM roles to manage and use the shared network. Service projects are attached to the host project and inherit access to the shared subnets. The 'Compute Network User' role must be granted on the specific subnets to allow service project members to create resources, while firewall rules are managed centrally in the host project.
- A. Correct.
Correct: Enabling the Shared VPC feature in the host project and designating it as the host is a required step to set up a Shared VPC.
- B. Correct.
Correct: The 'Compute Shared VPC Admin' role is necessary for users who need to manage the Shared VPC and its configuration.
- C. Incorrect.
Incorrect: The service projects do not require the Shared VPC feature to be enabled. Instead, they are attached to the host project by an administrator with the appropriate permissions.
- D. Correct.
Correct: Granting the 'Compute Network User' role on specific subnets allows service project users to create resources in those shared subnets.
- E. Incorrect.
Incorrect: Custom firewall rules in each service project are not necessary. Firewall rules for the Shared VPC are managed at the host project level and apply to all connected resources.