PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #44
You are using a third-party next-generation firewall to inspect traffic. You created a custom route of 0.0.0.0/0 to route egress traffic to the firewall. You want to allow your VPC instances without…
The correct answer is A. Turn on Private Google Access at the subnet level. D. Create a set of custom static routes to send traffic to the external IP addresses of Google APIs. By default, when a Compute Engine VM lacks an external IP address assigned to its network interface, it can only send packets to other internal IP address destinations. You can allow these VMs to connect to the set of external IP addresses used by Google APIs and services by…
Question
Options
- ATurn on Private Google Access at the subnet level.
- BTurn on Private Google Access at the VPC level.
- CTurn on Private Services Access at the VPC level.
- DCreate a set of custom static routes to send traffic to the external IP addresses of Google APIs
- ECreate a set of custom static routes to send traffic to the internal IP addresses of Google APIs
How the community answered
(29 responses)- A83% (24)
- B3% (1)
- C7% (2)
- E7% (2)
Explanation
By default, when a Compute Engine VM lacks an external IP address assigned to its network interface, it can only send packets to other internal IP address destinations. You can allow these VMs to connect to the set of external IP addresses used by Google APIs and services by enabling Private Google Access on the subnet used by the VM's network interface. https://cloud.google.com/vpc/docs/configure-private-google-access https://cloud.google.com/vpc/docs/private-access-options
Topics
Community Discussion
No community discussion yet for this question.