nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #69

Your team needs to configure their Google Cloud Platform (GCP) environment so they can centralize the control over networking resources like firewall rules, subnets, and routes. They also have an…

The correct answer is A. Shared VPC Network with a host project and service projects. Centralize network control: Use Shared VPC to connect to a common VPC network. Resources in those projects can communicate with each other securely and efficiently across project boundaries using internal IPs. You can manage shared network resources, such as subnets, routes…

Submitted by eva_at· Apr 18, 2026Configuring network security

Question

Your team needs to configure their Google Cloud Platform (GCP) environment so they can centralize the control over networking resources like firewall rules, subnets, and routes. They also have an on-premises environment where resources need access back to the GCP resources through a private VPN connection. The networking resources will need to be controlled by the network security team. Which type of networking design should your team use to meet these requirements?

Options

  • AShared VPC Network with a host project and service projects
  • BGrant Compute Admin role to the networking team for each engineering project
  • CVPC peering between all engineering projects using a hub and spoke model
  • DCloud VPN Gateway between all engineering projects using a hub and spoke model

How the community answered

(22 responses)
  • A
    73% (16)
  • B
    14% (3)
  • C
    9% (2)
  • D
    5% (1)

Explanation

Centralize network control: Use Shared VPC to connect to a common VPC network. Resources in those projects can communicate with each other securely and efficiently across project boundaries using internal IPs. You can manage shared network resources, such as subnets, routes, and firewalls, from a central host project, enabling you to apply and enforce consistent network policies across the https://cloud.google.com/docs/enterprise/best-practices-for-enterprise- organizations#centralize_network_control

Topics

#Shared VPC#Network Design#Hybrid Connectivity#Centralized Networking

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice