Google
ASSOCIATE-CLOUD-ENGINEER · Question #187
Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a…
The correct answer is A. Create the instance without a public IP address. Private Google Access allows access to the external IP addresses. which is against the
Submitted by mike_84· Mar 30, 2026Configuring access and security
Question
Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?
Options
- ACreate the instance without a public IP address.
- BCreate the instance with Private Google Access enabled.
- CCreate a deny-all egress firewall rule on the VPC network.
- DCreate a route on the VPC to route all traffic to the instance over the VPN tunnel.
How the community answered
(27 responses)- A93% (25)
- B4% (1)
- D4% (1)
Explanation
Private Google Access allows access to the external IP addresses. which is against the
Topics
#Compute Engine#public IP#VPC networking#network isolation
Community Discussion
No community discussion yet for this question.