Google Professional Cloud Network Engineer Question 280
Single answerGoogle Cloud PlatformYou are tasked with enabling communication from a private VM instance in Google Cloud to an external third-party service over the internet while ensuring that the VM does not have a public IP address. You decide to use Cloud NAT to achieve this. During the configuration, you want to ensure that the VM's private IP address range is preserved during the NAT translation process. Which Cloud NAT configuration should you choose?
- A
Configure Cloud NAT in 'dynamic NAT' mode with no address pooling.
- B
Configure Cloud NAT in 'manual NAT' mode and enable Private NAT.
- C
Configure Cloud NAT in 'automatic NAT' mode and enable source NAT with IP masquerading.
- D
Configure Cloud NAT with 'manual NAT' mode and disable Private NAT.
Show answer and explanation
Correct answer: B
Explanation
To ensure the private IP range of a VM instance is preserved during NAT translation, you must enable Private NAT in your Cloud NAT configuration. Private NAT ensures that the private IP address is maintained even while outgoing traffic is sent to external services. In this scenario, configuring Cloud NAT in 'manual NAT' mode and enabling Private NAT is the correct approach to meet the requirements.
- A. Incorrect.
This option refers to using dynamic NAT with no address pooling. While dynamic NAT can handle outgoing requests from private instances, it does not explicitly preserve private IP ranges during NAT translation.
- B. Correct.
This option correctly describes enabling Private NAT with 'manual NAT' mode. Private NAT ensures that the private IP range is preserved during NAT translation, meeting the requirement to maintain the private IP.
- C. Incorrect.
This option describes automatic NAT with source NAT using IP masquerading. While it allows outbound traffic, it does not preserve the private IP range during NAT translation.
- D. Incorrect.
This option disables Private NAT, which directly conflicts with the requirement to preserve the private IP range during NAT translation.