Google PCA Manage implementation of cloud architecture Practice Question
An organization is using Shared VPC with multiple projects. They want to allow a service project to use a Cloud SQL instance created in the host project. Which step is required?
⚠ Common exam trap
Google Cloud often tests the misconception that VPC peering between host and service projects is required, when in fact Shared VPC eliminates that need and the actual peering is with the Google-managed service network via Private Services Access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create the Cloud SQL instance with a private IP and enable Private Services Access in the host project
When using Shared VPC, a service project can use a Cloud SQL instance with a private IP from the host project's VPC. To enable this, the Cloud SQL instance must be created with a private IP and Private Services Access must be configured in the host project. This establishes a VPC peering connection between the host project's VPC and the Google-managed Cloud SQL service network, allowing the service project's resources to communicate with the instance via internal IP.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create the Cloud SQL instance with a private IP and enable Private Services Access in the host project
Why this is correct
Private Services Access creates a VPC peering between the host project and the Cloud SQL service producer.
- ✗
Grant the service project's Cloud SQL service account the Cloud SQL Client role on the host project
Why it's wrong here
Service accounts are for Cloud SQL itself, not for networking.
- ✗
Configure VPC peering between host and service project
Why it's wrong here
VPC peering alone is not sufficient; you need Private Services Access specifically for Cloud SQL.
- ✗
Enable the Cloud SQL Admin API in the service project
Why it's wrong here
Enabling the API is necessary but not sufficient for network access.
Go deeper
Related to this question
Learn chapter
Introduction to Google Cloud Platform
Key term
Shared VPC
A Shared VPC allows multiple projects or accounts within a cloud environment to use the same Virtual Private Cloud (VPC) network, enabling centralized management and isolation of resources.
Key term
CAN
A CAN (Controller Area Network) is a robust vehicle bus standard designed to allow microcontrollers and devices to communicate with each other without a host computer.
About these practice questions
This PCA question is part of Courseiva's 955-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCA practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCA exam.