hardMultiple Select
Google ACE Practice Question: Is designing a VPC network with connectivity to…
An organization is designing a VPC network with connectivity to an on-premises network via Cloud VPN. They have multiple projects that need to share the VPN. Which three steps are required to implement this using Shared VPC? (Choose three.)
⚠ Common exam trap
Google Cloud often tests the misconception that Shared VPC configuration steps are performed in the service project, but in reality, all networking resources (VPN gateway, tunnels, Cloud Router) must be created in the host project, and the service project is only attached to consume those resources.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Attach the service project to the host project.
Attaching the service project to the host project is a fundamental step in Shared VPC. This attachment allows the service project to use the host project's VPC network resources, including the Cloud VPN gateway and tunnels, enabling centralized connectivity without duplicating VPN infrastructure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Attach the service project to the host project.
Why this is correct
Service projects must be attached to the host project to use shared resources.
- ✓
Create a Cloud VPN gateway in the host project.
Why this is correct
VPN gateway resides in the host project to provide shared connectivity.
- ✓
Configure the VPN tunnels in the host project.
Why this is correct
Tunnels are configured in the host project using the shared network.
- ✗
Enable the Shared VPC feature in the service project.
Why it's wrong here
Shared VPC must be enabled in the host project, not the service project.
- ✗
Create a Cloud Router in the service project.
Why it's wrong here
Cloud Router must be in the host project to manage BGP sessions.
Go deeper
Related to this question
Learn chapter
Service Account Key Management
Key term
Shared VPC
A Shared VPC allows multiple projects or accounts within a cloud environment to use the same Virtual Private Cloud (VPC) network, enabling centralized management and isolation of resources.
Key term
Cloud VPN
A Cloud VPN is a service that securely connects your private network to a cloud provider's network over the public internet using encryption and authentication.
About these practice questions
Courseiva writes every ACE question from scratch — 775 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ACE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ACE exam.