Google Professional Cloud Network Engineer Question 84
Select 3Google Cloud PlatformYour organization has a Google Cloud environment where a Public Advertised Prefix (PAP) is configured to advertise an owned public IP range to the internet. You want to delegate a subset of this range to a specific project for use by multiple VM instances. Additionally, these VMs require private connectivity to on-premises resources using non-RFC 1918 IP addresses while ensuring they can still access the internet through a Private NAT. Which configuration steps should you follow?
- A
Create a Public Delegated Prefix (PDP) from the PAP and assign it to the desired project.
- B
Use Private NAT to translate the private non-RFC 1918 IP addresses to public IPs for outbound internet access.
- C
Enable Cloud NAT on the VPC to allow the VMs to communicate privately with on-premises resources.
- D
Configure the VMs to use the delegated public IPs directly for outbound traffic.
- E
Establish a VPN or Interconnect for private communication between the VPC and on-premises resources.
Show answer and explanation
Correct answers: A, B, E
Explanation
To meet the requirements, you need to delegate a subset of the public IP range using a Public Delegated Prefix (PDP) and assign it to the appropriate project. Private NAT is necessary to translate the VMs' private non-RFC 1918 IPs to public IPs for internet access. For private communication with on-premises resources, you also need to establish a VPN or Interconnect. Cloud NAT, while useful for internet access, does not meet the requirement for private on-premises connectivity.
- A. Correct.
Correct: A Public Delegated Prefix (PDP) allows you to allocate a subset of the Public Advertised Prefix (PAP) to a specific project or VPC for use by resources in that project.
- B. Correct.
Correct: Private NAT is used to translate private (or non-RFC 1918) IP addresses to public IPs for internet access, ensuring private IPs are not exposed directly.
- C. Incorrect.
Incorrect: Cloud NAT does not support private communication between on-premises resources and Google Cloud. It is used for enabling private VMs to access the internet.
- D. Incorrect.
Incorrect: The VMs should not use the delegated public IPs directly for outbound traffic. Instead, Private NAT or Cloud NAT should handle internet communication securely.
- E. Correct.
Correct: To ensure private communication between on-premises resources and the VPC, a VPN or Interconnect must be established for secure connectivity.