nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #255

You are designing the architecture for your organization so that clients can connect to certain Google APIs. Your plan must include a way to connect to Cloud Storage and BigQuery. You also need to…

The correct answer is B. Configure Private Google Access on the subnet resource. Create a default route to the internet. Enabling Private Google Access on the subnet lets VMs without public IPs reach Google APIs (including Cloud Storage and BigQuery) over Google’s private network, no internet egress needed. This is a one-step, cloud-native configuration per subnet, without touching routing or…

Submitted by parkjh· Apr 18, 2026Designing, planning, and prototyping a Google Cloud network

Question

You are designing the architecture for your organization so that clients can connect to certain Google APIs. Your plan must include a way to connect to Cloud Storage and BigQuery. You also need to ensure the traffic does not traverse the internet. You want your solution to be cloud-first and require the least amount of configuration steps. What should you do?

Options

  • AConfigure Private Google Access on the VPC resource. Create a default route to the internet.
  • BConfigure Private Google Access on the subnet resource. Create a default route to the internet.
  • CConfigure Cloud NAT, and remove the default route to the internet.
  • DConfigure a global Secure Web Proxy, and remove the default route to the internet.

How the community answered

(58 responses)
  • A
    12% (7)
  • B
    81% (47)
  • C
    2% (1)
  • D
    5% (3)

Explanation

Enabling Private Google Access on the subnet lets VMs without public IPs reach Google APIs (including Cloud Storage and BigQuery) over Google’s private network, no internet egress needed. This is a one-step, cloud-native configuration per subnet, without touching routing or proxy components.

Topics

#Private Google Access#Network Connectivity#Google APIs#VPC Networking

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice