Google Cloud Professional Cloud Network Engineer PCNE — Topic 1 Question 6

Question

You are using a third-party next-generation firewall to inspect traffic. You created a custom route of 0.0.0.0/0 to route egress traffic to the firewall. You want to allow your VPC instances without public IP addresses to access the BigQuery and Cloud Pub/Sub APIs, without sending the traffic through the firewall. Which two actions should you take? (Choose two.)

Accepted Answer

Correct answer: A, D. The correct answer is A, D. Option A: Turn on Private Google Access at the subnet level. Option D: Create a set of custom static routes to send traffic to the external IP addresses of Google APIs and services via the default internet gateway. Private Google Access lets internal instances reach Google APIs without external IPs.

Google Cloud Professional Cloud Network Engineer PCNE — Question 6