- A
Cloud Interconnect
Why wrong: Cloud Interconnect provides dedicated private connectivity, not over the internet. It does not meet the 'over the internet' requirement.
- B
Private Google Access
Why wrong: Private Google Access allows on-premises hosts to use private IPs to reach Google APIs, not for site-to-site connectivity.
- C
Cloud NAT
Why wrong: Cloud NAT enables outbound internet from private instances, not for inbound site-to-site connections.
- D
Direct Peering
Why wrong: Direct Peering provides a direct connection between on-prem and Google but is not over the internet and not designed for multiple remote offices.
- E
Cloud VPN
Cloud VPN creates encrypted tunnels over the internet, meeting both security and reliability requirements for multiple remote offices.
Cloud VPN vs Cloud Interconnect for Multi-Office Connectivity — Google Professional Cloud Developer Explained
This PCD practice question tests your understanding of integrating google cloud services. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. A key principle to apply: cloud VPN. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company is integrating a legacy application with Google Cloud using Cloud VPN. The application must be accessed from multiple remote offices over the internet. Which TWO technologies should the company use to ensure secure and reliable connectivity? (Choose TWO.)
Quick Answer
The answer is Cloud VPN and Cloud Interconnect. Cloud VPN establishes encrypted site-to-site tunnels over the internet, securing traffic between each remote office and Google Cloud, while Cloud Interconnect provides dedicated, low-latency, and reliable physical connections that bypass the public internet for consistent performance across multiple offices. On the Google Professional Cloud Developer exam, this pairing tests your understanding of hybrid connectivity options: Cloud VPN handles encrypted internet-based links, and Cloud Interconnect ensures reliability for critical workloads, with a common trap being to confuse Direct Peering—which is for direct on-premises to Google access, not hub-spoke multi-office setups—or to pick Cloud NAT, which only manages outbound internet for private instances. Remember the memory tip: “VPN for the encrypted road, Interconnect for the reliable rail.”
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Cloud VPN
Cloud VPN (Option E) is correct because it creates secure site-to-site VPN tunnels over the internet, allowing encrypted communication from each remote office. This meets the requirement for connectivity over the internet. Cloud Interconnect (Option A) is incorrect because it provides dedicated private connections, not over the internet, and does not satisfy the 'over the internet' requirement. Option B (Private Google Access) enables on-premises hosts to use private IPs to reach Google APIs, not for inter-site connectivity. Option C (Cloud NAT) enables outbound internet access from private instances, not for site-to-site. Option D (Direct Peering) provides direct connection between on-prem and Google but is not designed for hub-spoke topologies across multiple offices and also does not operate over the internet.
Key principle: Cloud VPN
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cloud Interconnect
Why it's wrong here
Cloud Interconnect provides dedicated private connectivity, not over the internet. It does not meet the 'over the internet' requirement.
- ✗
Private Google Access
Why it's wrong here
Private Google Access allows on-premises hosts to use private IPs to reach Google APIs, not for site-to-site connectivity.
- ✗
Cloud NAT
Why it's wrong here
Cloud NAT enables outbound internet from private instances, not for inbound site-to-site connections.
- ✗
Direct Peering
Why it's wrong here
Direct Peering provides a direct connection between on-prem and Google but is not over the internet and not designed for multiple remote offices.
- ✓
Cloud VPN
Common exam traps
Common exam trap: answer the scenario, not the keyword
Candidates often assume Cloud Interconnect works over the internet, but it is a dedicated private connection. The question explicitly states 'over the internet,' so only Cloud VPN qualifies.
Detailed technical explanation
How to think about this question
Treat this as a scenario question. Identify the problem, the constraint, and the best action. Then compare each option against those facts.
KKey Concepts to Remember
- Cloud VPN
- Cloud Interconnect
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Cloud VPN
Real-world example
How this comes up in practice
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
Visual reference
What to study next
Got this wrong? Here's your next step.
Review cloud VPN, then practise related PCD questions on the same topic to reinforce the concept.
- →
Integrating Google Cloud services — study guide chapter
Learn the concepts, then practise the questions
- →
Integrating Google Cloud services practice questions
Targeted practice on this topic area only
- →
All PCD questions
999 questions across all exam domains
- →
Google Professional Cloud Developer study guide
Full concept coverage aligned to exam objectives
- →
PCD practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Related PCD practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Manage a Solution that Can Span Multiple Database Systems practice questions
Practise PCD questions linked to Manage a Solution that Can Span Multiple Database Systems.
Deploy Scalable and Highly Available Databases in Google Cloud practice questions
Practise PCD questions linked to Deploy Scalable and Highly Available Databases in Google Cloud.
Design Scalable and Highly Available Cloud Database Solutions practice questions
Practise PCD questions linked to Design Scalable and Highly Available Cloud Database Solutions.
Migrate Data Solutions practice questions
Practise PCD questions linked to Migrate Data Solutions.
Designing highly scalable, available, and reliable cloud-native applications practice questions
Practise PCD questions linked to Designing highly scalable, available, and reliable cloud-native applications.
Building and testing applications practice questions
Practise PCD questions linked to Building and testing applications.
Deploying applications practice questions
Practise PCD questions linked to Deploying applications.
Integrating Google Cloud services practice questions
Practise PCD questions linked to Integrating Google Cloud services.
Managing application performance monitoring practice questions
Practise PCD questions linked to Managing application performance monitoring.
PCD fundamentals practice questions
Practise PCD questions linked to PCD fundamentals.
PCD scenario practice questions
Practise PCD questions linked to PCD scenario.
PCD troubleshooting practice questions
Practise PCD questions linked to PCD troubleshooting.
Practice this exam
Start a free PCD practice session
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Questions learners often ask
What does this PCD question test?
Integrating Google Cloud services — This question tests Integrating Google Cloud services — Cloud VPN.
What is the correct answer to this question?
The correct answer is: Cloud VPN — Cloud VPN (Option E) is correct because it creates secure site-to-site VPN tunnels over the internet, allowing encrypted communication from each remote office. This meets the requirement for connectivity over the internet. Cloud Interconnect (Option A) is incorrect because it provides dedicated private connections, not over the internet, and does not satisfy the 'over the internet' requirement. Option B (Private Google Access) enables on-premises hosts to use private IPs to reach Google APIs, not for inter-site connectivity. Option C (Cloud NAT) enables outbound internet access from private instances, not for site-to-site. Option D (Direct Peering) provides direct connection between on-prem and Google but is not designed for hub-spoke topologies across multiple offices and also does not operate over the internet.
What should I do if I get this PCD question wrong?
Review cloud VPN, then practise related PCD questions on the same topic to reinforce the concept.
What is the key concept behind this question?
Cloud VPN
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Keep practising
More PCD practice questions
- A company is deploying a microservices architecture on GKE. They need to expose a set of related microservices under a s…
- You need to monitor the CPU usage of a Compute Engine instance and trigger an alert when it exceeds 80% for 5 minutes. W…
- A Cloud Bigtable instance has a single cluster. To improve availability and read throughput, the team decides to add a s…
- A developer wants to enable IAM database authentication for Cloud SQL for PostgreSQL. Which IAM role must be granted to…
- A company is using Cloud Bigtable for a time-series workload. They want to monitor performance and identify hot spots. W…
- A company wants to run hybrid transactional/analytical processing (HTAP) workloads on a PostgreSQL-compatible database w…
Last reviewed: Jun 24, 2026
This PCD practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCD exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.