Google Professional Cloud Network Engineer Question 595
Select 2Google Cloud PlatformYou are tasked with configuring Private NAT for a Google Cloud project to enable private instances in a VPC to access the internet while ensuring they do not have external IP addresses. Which of the following steps are required to properly configure Private NAT in this scenario?
- A
Create a Cloud NAT gateway and associate it with the desired VPC and subnetwork.
- B
Ensure that the instances in the subnetwork have external IP addresses assigned.
- C
Set up a route to direct outbound traffic from the private instances to the NAT gateway.
- D
Configure the Cloud NAT gateway to use IP address ranges from a private subnet for NAT translation.
- E
Enable Cloud NAT logging to track the translated traffic flows.
Show answer and explanation
Correct answers: A, C
Explanation
To configure Private NAT, a Cloud NAT gateway must be created and associated with the desired VPC and subnetwork. Additionally, routes must be configured to direct outbound traffic from private instances to the NAT gateway. Instances in the subnetwork should not have external IPs, as the purpose of Private NAT is to enable internet access without assigning external IP addresses. Logging is optional and not a required step for this setup.
- A. Correct.
Correct: Creating a Cloud NAT gateway and associating it with the appropriate VPC and subnetwork is a required step to enable Private NAT functionality.
- B. Incorrect.
Incorrect: Instances in the subnetwork must not have external IP addresses if you want to use Private NAT. This is a key requirement for this configuration.
- C. Correct.
Correct: Setting up a route is essential to ensure that traffic destined for external networks is properly directed to the NAT gateway for translation.
- D. Incorrect.
Incorrect: Cloud NAT uses external IP addresses from Google-managed pools for NAT translation, not private subnet IP ranges.
- E. Incorrect.
Incorrect: Enabling logging is optional and not required for the basic configuration of Private NAT.