Google Cloud Professional Cloud Network Engineer PCNE — Topic 1 Question 92

Question

You need to enable Private Google Access for use by some subnets within your Virtual Private Cloud (VPC). Your security team set up the VPC to send all internet-bound traffic back to the on- premises data center for inspection before egressing to the internet, and is also implementing VPC Service Controls in the environment for API-level security control. You have already enabled the subnets for Private Google Access. What configuration changes should you make to enable Private Google Access while adhering to your security team’s requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: 1. Create a private DNS zone with a CNAME record for *.googleapis.com to restricted.googleapis.com, with an A record pointing to Google's restricted API address range.2. Create a custom route that points Google's rest...

Google Cloud Professional Cloud Network Engineer PCNE — Question 92