PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #218
Your organization has multiple VMs running on Google Cloud within a VPC. The VMs require connectivity to certain Google APIs. You need to enable Private Google Access for VM connectivity to Cloud…
The correct answer is D. Enable Private Google Access on the subnet, create a default route that points to the default. Private Google Access is enabled at the subnet level, not at the project, VM, or VPC level. When enabled on a subnet, VM instances in that subnet with only internal IP addresses can reach Google APIs (like Cloud Storage) via Google's internal network. Additionally, a default…
Question
Options
- AEnable Private Google Access on the project, remove the default route that points to the default
- BEnable Private Google Access on the VM, remove the default route that points to the default
- CEnable Private Google Access on the VPC, create a default route that points to the default
- DEnable Private Google Access on the subnet, create a default route that points to the default
How the community answered
(28 responses)- A7% (2)
- B4% (1)
- D89% (25)
Explanation
Private Google Access is enabled at the subnet level, not at the project, VM, or VPC level. When enabled on a subnet, VM instances in that subnet with only internal IP addresses can reach Google APIs (like Cloud Storage) via Google's internal network. Additionally, a default route pointing to the default internet gateway (0.0.0.0/0 → default-internet-gateway) must exist so traffic destined for Google API IP ranges can be routed correctly. Option C is wrong because Private Google Access is not a VPC-level setting. Options A and B are wrong because it is not configured at the project or VM level.
Topics
Community Discussion
No community discussion yet for this question.