D is the answer. The question wants us to follow Google's recommended practice, keeping it simply is one of the key best practices. Thus, creating ONLY 1 Shared VPC in the host project makes it easier to centralize and manage network resources (such as subnets, routes, and security rules) for the attached service VPCs.

Correct Answer (D): Building on the initial reference architecture, Shared VPC host projects and multiple service projects let administrators delegate administrative responsibilities—such as creating and managing instances—to Service Project Admins while maintaining centralized control over network resources like subnets, routes, and firewalls. https://cloud.google.com/solutions/best-practices-vpc-design#single-host-project-multiple-service-projects-single-shared-vpc

Exam on 2024-05-02

For me it's A. Why D?

Question says - " Your network and security team has strict controls over which routes are exposed between departments" Doesn't it mean to use FCRA (B)? Is this requirement a distraction or the right thing. If we choose D, the routes between staging and prod exists even though we can enforce firewalls to restrict traffic.

D. Create 1 VPC within the shared VPC Host Project, and share individual subnets with the Service Projects to filter access between the specific networks.

How can we create 2 Shared VPCs in host project? Straight answer is D

The answer is A. A VPC for each...configure peering...create service project for each and restrict which subnet can communicate.

D is the correct answer

Answer is : D

D is correct

D is the correct answer

Ans - D