Cloud Digital Leader Google Cloud Products and Services Practice Question
Which Google Cloud service can be used to create and manage virtual networks, subnets, firewall rules, and VPN connections?
⚠ Common exam trap
GCDL often tests the distinction between networking services and security or delivery services, causing candidates to confuse Cloud Armor (security) or Cloud CDN (content delivery) with core networking components like VPC.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cloud VPC
Cloud VPC (Virtual Private Cloud) is the Google Cloud service that provides networking functionality for your resources. It allows you to create and manage virtual networks, subnets, firewall rules, and VPN connections. It is the foundational networking service in GCP, enabling you to define IP ranges, routes, and security policies for your instances and services.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cloud Armor
Why it's wrong here
Cloud Armor is a web application firewall that inspects HTTP/S traffic and enforces security policies such as IP allow/deny lists, preconfigured rules, and rate limiting at the edge. While it influences traffic to a backend, it does not create or manage VPC subnets, routes, firewall rules, or VPN connections; it simply adds a security layer to an already-existing load balancer and network path.
- ✗
Cloud Load Balancing
Why it's wrong here
Cloud Load Balancing is a managed service that distributes requests across backend instances or serverless backends, providing high availability and auto-scaling. It operates within the boundaries of an existing VPC and does not manage the underlying network structure—it cannot define CIDR ranges, create subnetworks, configure static routes, or establish VPN tunnels; it only consumes the network's addressing and routing to forward traffic.
- ✓
Cloud VPC
Why this is correct
Cloud VPC (Virtual Private Cloud) is the correct service for creating and managing a private network in Google Cloud. It lets you define global or regional networks, allocate IP CIDR ranges, create subnetworks, set up firewall rules, dynamic routes (including BGP with Cloud Router), and connect on-premises environments via Cloud VPN or Interconnect. As a foundational networking primitive, Cloud VPC provides full control over routing, addressing, and isolation, directly matching the requirement to create and manage the network itself.
- ✗
Cloud CDN
Why it's wrong here
Cloud CDN (Content Delivery Network) caches static and dynamic content at Google's global edge points of presence to reduce latency and egress costs. It is an application performance service that attaches to an HTTP(S) load balancer with a backend service or bucket, and it does not create or manage network resources such as subnets, routes, or firewalls, nor does it control IP addressing or connectivity. Its scope is content delivery optimization, not network administration.
Visual reference
Go deeper
Related to this question
Learn chapter
GCP Network: VPC, Subnets, and Firewalls
Key term
Firewall
A firewall is a network security system that monitors and controls incoming and outgoing traffic based on predetermined security rules to protect trusted internal networks from untrusted external networks.
Key term
VPN
A VPN (Virtual Private Network) creates a secure, encrypted tunnel between your device and a remote server, protecting your data and hiding your online activity.
About these practice questions
This GCDL question is part of Courseiva's 848-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Google Cloud exam blueprint
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.