PCDE Migrate data solutions Practice Question
An engineer needs to migrate a 500 GB MySQL database to Cloud SQL. The source is in a private network with no public IP. The Cloud SQL instance will also use a private IP. Which connectivity method should the engineer use for Database Migration Service?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use VPC peering between the source network and the Cloud SQL VPC.
For private IP scenarios, DMS requires VPC peering between the source network and the Cloud SQL VPC. Alternatively, Cloud SQL Auth Proxy can be used if the source can connect to the proxy, but VPC peering is the recommended direct method for DMS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Assign a public IP to the source database and allowlist it in Cloud SQL.
Why it's wrong here
Exposing the source to the internet is a security risk and may not be possible.
- ✓
Use VPC peering between the source network and the Cloud SQL VPC.
Why this is correct
VPC peering enables private connectivity for DMS.
- ✗
Use Cloud VPN to connect the source network to Cloud SQL.
Why it's wrong here
Cloud VPN establishes a secure network tunnel between an on-premises network and a Google Cloud VPC. While this provides network connectivity, it does not fulfil the specific private connectivity requirements for Database Migration Service (DMS) to access the source database. DMS's private connectivity option leverages Private Service Access, connecting a Google-managed service producer VPC to the customer's VPC, which then needs to reach the source. Cloud VPN is tempting as it secures private network paths, and would be the correct choice for general network-level private access between on-premises and Cloud environments, or if the migration tool could be deployed within the customer's VPC.
- ✗
Configure IP allowlisting on Cloud SQL to accept traffic from the source's private IP range.
Why it's wrong here
IP allowlisting is only for public IP connections.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCDE question from scratch — 1,446 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCDE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCDE exam.