You have placed several Compute Engine instances in a private subnet. You want to allow these instances to access Google Cloud services, like Cloud Storage, without traversing the internet. What…

Question

Options

• AEnable Private Google Access for the private subnet.
• BConfigure Private Service Connect for the private subnet's Virtual Private Cloud (VPC) and
• CReserve and assign static external IP addresses for the Compute Engine instances.
• DCreate a Cloud NAT gateway for the region where the private subnet is configured.

• A
  90% (19)
• B
  5% (1)
• C
  5% (1)

Explanation

Private Google Access allows Compute Engine instances that have only internal (private) IP addresses to reach Google APIs and services (such as Cloud Storage) via Google's internal network, without requiring the traffic to traverse the public internet. It is enabled at the subnet level and is the simplest, most direct solution for this use case. Cloud NAT (option D) does allow outbound connectivity but routes traffic over the public internet, which contradicts the requirement. Assigning external IPs (option C) also uses the internet. Private Service Connect (option B) can be used but is more complex and typically used for specific, custom endpoints rather than the full range of Google APIs.

No community discussion yet for this question.