nerdexam
GoogleGoogle

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #130

PROFESSIONAL-CLOUD-NETWORK-ENGINEER Question #130: Real Exam Question with Answer & Explanation

Sign in or unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER to reveal the answer and full explanation for question #130. The question stem and answer options stay visible for context.

Submitted by takeshi77· Apr 18, 2026Configuring network services

Question

Your company has recently installed a Cloud VPN tunnel between your on-premises data center and your Google Cloud Virtual Private Cloud (VPC). You need to configure access to the Cloud Functions API for your on-premises servers. The configuration must meet the following requirements: - Certain data must stay in the project where it is stored and not be exfiltrated to other projects. - Traffic from servers in your data center with RFC 1918 addresses do not use the internet to access Google Cloud APIs. - All DNS resolution must be done on-premises. The solution should only provide access to APIs that are compatible with VPC Service Controls. What should you do?

Options

  • ACreate an A record for private.googleapis.com using the 199.36.153.8/30 address range.
  • BCreate an A record for restricted.googleapis.com using the 199.36.153.4/30 address range.
  • CCreate an A record for restricted.googleapis.com using the 199.36.153.4/30 address range.
  • DCreate an A record for private.googleapis.com using the 199.36.153.8/30 address range.

Unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER to see the answer

You've previewed enough free PROFESSIONAL-CLOUD-NETWORK-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Private Google Access#VPC Service Controls#Hybrid Connectivity#DNS
Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER PracticeBrowse All PROFESSIONAL-CLOUD-NETWORK-ENGINEER Questions