Google Professional Cloud Network Engineer Question 225
Single answerGoogle Cloud PlatformYou are designing a Google Cloud solution where Compute Engine instances in a private subnet need to access Google APIs and services without using public IP addresses. How can you configure this setup to ensure secure access to Google services?
- A
Enable Private Google Access on the subnet.
- B
Assign external IP addresses to the Compute Engine instances.
- C
Set up a NAT gateway for the private subnet to route traffic to the internet.
- D
Configure a custom DNS zone to resolve Google API endpoints to internal IP addresses.
Show answer and explanation
Correct answer: A
Explanation
To allow private Compute Engine instances to securely access Google APIs and services without using public IP addresses, you need to enable Private Google Access on the subnet. This feature ensures that traffic destined for Google services is routed directly through Google's internal network using the instances' internal IPs, without requiring external IPs or a NAT gateway.
- A. Correct.
Correct. Enabling Private Google Access on the subnet allows instances without external IP addresses to access Google services using their internal IP addresses.
- B. Incorrect.
Incorrect. Assigning external IP addresses would allow access to Google APIs but does not align with the requirement to avoid using public IPs.
- C. Incorrect.
Incorrect. A NAT gateway is used to enable internet access for private instances, but it is not necessary for accessing Google APIs when Private Google Access is enabled.
- D. Incorrect.
Incorrect. Configuring a custom DNS zone is not required for accessing Google APIs through Private Google Access; Google automatically handles the DNS resolution.