Courseiva
Migrate data solutionsmediumMultiple ChoiceObjective-mapped

PCDE Migrate data solutions Practice Question

A team is migrating a self-managed PostgreSQL database to AlloyDB using DMS. They need to set up the source connection profile. The source database is in a different VPC network, and the team wants to avoid exposing it to the internet. Which connectivity option should they use?

⚠ Common exam trap

Many exam-takers confuse VPC peering with Direct peering, assuming both are for VPC-to-VPC connections, but Direct peering is specifically for on-premises or external networks, not for connecting two Google Cloud VPCs.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

VPC peering

VPC peering is the correct connectivity option because it allows private IP connectivity between two VPC networks without exposing the source database to the internet. DMS can use VPC peering to connect to a source PostgreSQL database in a different VPC, as long as the CIDR ranges do not overlap and the necessary firewall rules allow traffic on port 5432. This meets the requirement of avoiding internet exposure while enabling secure, low-latency replication.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • VPC peering

    Why this is correct

    VPC peering provides private connectivity between VPCs without internet exposure.

  • Direct peering

    Why it's wrong here

    Direct peering is not a supported option for DMS source connection profiles.

  • Cloud SQL Auth Proxy

    Why it's wrong here

    Auth Proxy is used to connect to Cloud SQL, not as a source network option.

  • IP allowlisting for public IP

    Why it's wrong here

    This would expose the source to the internet, which is not desired.

Visual reference

192.168.1.0 /24 256 addresses (254 usable) 192.168.1.0 /25 Subnet A 128 addr (126 usable) 192.168.1.128 /25 Subnet B 128 addr (126 usable) Borrowing 1 bit from host portion creates 2 subnets (/25)

About these practice questions

One of 1,446 original PCDE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCDE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCDE exam.