Exam Professional Cloud Network Engineer topic 1 question 240 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 240
Topic #: 1

[All Professional Cloud Network Engineer Questions]

You are designing the architecture for your organization so that clients can connect to certain Google APIs. Your plan must include a way to connect to Cloud Storage and BigQuery. You also need to ensure the traffic does not traverse the internet. You want your solution to be cloud-first and require the least amount of configuration steps. What should you do?

A. Configure Private Google Access on the VPC resource. Create a default route to the internet.
B. Configure Private Google Access on the subnet resource. Create a default route to the internet.
C. Configure Cloud NAT, and remove the default route to the internet.
D. Configure a global Secure Web Proxy, and remove the default route to the internet.

Show Suggested Answer

Suggested Answer: B 🗳️

by glb2 at June 23, 2025, 12:22 p.m.

Comments

Submit Cancel

glb2

1 month, 3 weeks ago

Selected Answer: B

Private Google Access must be enabled at the subnet level (not the VPC).

upvoted 2 times

...