Google
PROFESSIONAL-CLOUD-ARCHITECT · Question #270
You are configuring the cloud network architecture for a newly created project m Google Cloud that will host applications in Compote Engine Compute Engine virtual machine instances will be created in
Sign in or unlock PROFESSIONAL-CLOUD-ARCHITECT to reveal the answer and full explanation for question #270. The question stem and answer options stay visible for context.
Submitted by andres_qro· Mar 30, 2026Designing and planning a cloud solution architecture
Question
You are configuring the cloud network architecture for a newly created project m Google Cloud that will host applications in Compote Engine Compute Engine virtual machine instances will be created in two different subnets (sub-a and sub-b) within a single region: - Instances in sub-a win have public IP addresses - Instances in sub-b will have only private IP addresses To download updated packages, instances must connect to a public repository outside the boundaries of Google Cloud. You need to allow sub-b to access the external repository. What should you do?
Options
- AEnable Private Google Access on sub-b
- BConfigure Cloud NAT and select sub b m the NAT mapping section
- CConfigure a bastion host instance in sub a to connect to instances in sub-b
- DEnable Identity Aware Proxy for TCP forwarding for instances in sub-b
Unlock PROFESSIONAL-CLOUD-ARCHITECT to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-ARCHITECT questions. Unlock PROFESSIONAL-CLOUD-ARCHITECT for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Networking#Cloud NAT#Private IP#Compute Engine