Match each GCP networking concept to its description.
Drag a concept onto its matching description — or click a concept then click the description.
Virtual private cloud network
Regional IP address range within a VPC
Outbound internet access for private instances
Distributes traffic across instances
Content delivery network for low-latency delivery
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Firewall Rule: A set of rules that control incoming and outgoing traffic to instances
VPC is a global network, Subnet is regional, Firewall rules control traffic, Cloud Router uses BGP for hybrid connectivity, and VPC Peering connects VPCs privately.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
VPC: A regional IP address range within a VPC
Why it's wrong here
A VPC is a global, isolated virtual network that spans all Google Cloud regions, not a regional IP address range. The description confuses a VPC with a subnet, which is a regional IP range carved out of a VPC. VPCs provide global routing and distributed firewall policies, while subnets define the actual IP address space within a specific region.
Subnet: A global, isolated virtual network within Google Cloud
Why it's wrong here
A subnet in Google Cloud is a regional IP address range that belongs to a VPC, not a global isolated network. Subnets are scoped to a single region and can overlap with subnets in other VPCs, but not within the same VPC. The global, isolated virtual network is the VPC itself, so this statement incorrectly swaps the roles of VPC and subnet.
Firewall Rule: A set of rules that control incoming and outgoing traffic to instances
Why this is correct
Firewall rules in Google Cloud are VPC-wide resources that control inbound and outbound traffic to virtual machine instances. They are stateful, meaning return traffic is automatically allowed, and they are evaluated in priority order with an implied deny rule at the end. Rules can selectively apply to instances via network tags, service accounts, or target IP ranges, enabling granular security within a VPC.
Cloud Router: A managed service that dynamically exchanges routes between your VPC and on-premises network using BGP
Why this is correct
Cloud Router is a fully managed BGP daemon that dynamically exchanges routes between your VPC and an on-premises network over Cloud VPN or Interconnect. It advertises VPC subnet routes to the on-premises peer and learns remote routes, enabling automatic failover and load balancing across redundant tunnels. Unlike static routes, Cloud Router adapts to topology changes without manual reconfiguration, making it essential for hybrid cloud reliability.
VPC Peering: A direct private connection between two VPCs
Why this is correct
VPC Peering provides a direct private connection between two VPCs, allowing instances to communicate using internal IP addresses without traversing the public internet or using VPN gateways. Peering is non-transitive: if VPC A is peered with B and B is peered with C, A cannot reach C through B. Each VPC continues to manage its own routes and firewall rules, but custom route exchange is required for full connectivity between peered networks.
Visual reference
Go deeper
Learn chapter
Google Cloud Platform Overview
Key term
Router
A router is a networking device that connects different networks together and directs data traffic between them by choosing the best path for data to travel.
Key term
Subnet
A subnet is a logical subdivision of an IP network, created by partitioning a larger network address space using subnet masks.
About these practice questions
This ACE question is part of Courseiva's 769-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ACE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ACE exam.