nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #174

Your company's cloud security policy dictates that VM instances should not have an external IP address. You need to identify the Google Cloud service that will allow VM instances without external IP…

The correct answer is B. Cloud NAT. https://cloud.google.com/nat/docs/overview "Cloud NAT (network address translation) lets certain resources without external IP addresses create outbound connections to the internet."

Submitted by suresh_in· Apr 18, 2026Configuring network security

Question

Your company's cloud security policy dictates that VM instances should not have an external IP address. You need to identify the Google Cloud service that will allow VM instances without external IP addresses to connect to the internet to update the VMs. Which service should you use?

Options

  • AIdentity Aware-Proxy
  • BCloud NAT
  • CTCP/UDP Load Balancing
  • DCloud DNS

How the community answered

(38 responses)
  • A
    8% (3)
  • B
    84% (32)
  • C
    5% (2)
  • D
    3% (1)

Explanation

https://cloud.google.com/nat/docs/overview "Cloud NAT (network address translation) lets certain resources without external IP addresses create outbound connections to the internet."

Topics

#Cloud NAT#Private VMs#Outbound Internet Access#Network Security

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice