Google Professional Cloud Network Engineer Question 282
Select 3Google Cloud PlatformYou need to configure a Private NAT for a Google Cloud project to allow virtual machine (VM) instances in a private subnet to access external services without exposing their private IP addresses. Which of the following steps must you take to implement Private NAT correctly?
- A
Create a Cloud NAT gateway and associate it with the desired VPC network.
- B
Enable 'Private Google Access' on the subnet where the VMs are located.
- C
Create a static route in the VPC network for outbound traffic to use the Cloud NAT gateway.
- D
Configure a Cloud Router in the same region as the subnet and attach it to the Cloud NAT gateway.
- E
Ensure that the VMs have external IP addresses to route traffic through the Cloud NAT.
Show answer and explanation
Correct answers: A, B, D
Explanation
To implement Private NAT, you must create a Cloud NAT gateway, enable 'Private Google Access' on the subnet, and configure a Cloud Router. These components work together to provide internet access for VMs without external IPs, ensuring their private IPs remain hidden. No static route or external IPs are necessary for this setup.
- A. Correct.
Correct. A Cloud NAT gateway is required to enable NAT functionality for the VPC network. Without this, NAT cannot be implemented.
- B. Correct.
Correct. 'Private Google Access' must be enabled on the subnet to allow instances without external IPs to access Google APIs and services.
- C. Incorrect.
Incorrect. No static route is required for Private NAT as routing is automatically handled by the Cloud NAT and VPC network configuration.
- D. Correct.
Correct. A Cloud Router is required to manage the NAT configurations, and it must be in the same region as the subnet being served.
- E. Incorrect.
Incorrect. VMs do not need external IP addresses when using Private NAT, as the NAT gateway handles the translation between private and public IPs.