PCNE Implementing a Virtual Private Cloud Practice Question
A company has a VPC with a subnet 10.0.1.0/24 in us-central1. They need to add a new subnet for a Kubernetes cluster that requires a secondary IP range for pods. The primary IP range of the new subnet must be 10.0.2.0/24. What is the correct way to create this subnet?
⚠ Common exam trap
Google Cloud often tests the misconception that secondary IP ranges can be added to an existing subnet via an update, but in Google Cloud, they must be specified at subnet creation time and are immutable afterward.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create the subnet with primary range 10.0.2.0/24 and specify the secondary range at creation time.
In Google Cloud VPC, a subnet can have both a primary IP range and one or more secondary IP ranges, and these secondary ranges must be specified at subnet creation time. For a Kubernetes cluster, the secondary range for pods is required, and it cannot be added after the subnet is created; it must be defined during the initial subnet creation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create the subnet with primary range 10.0.2.0/24 and specify the secondary range at creation time.
Why this is correct
Secondary ranges must be specified at subnet creation.
- ✗
Create the subnet with primary range 10.0.2.0/24 and then update it to add the secondary range.
Why it's wrong here
Subnets cannot be updated after creation to add secondary ranges.
- ✗
Create two subnets: one with 10.0.2.0/24 for primary and another for the secondary range.
Why it's wrong here
Secondary ranges are part of the same subnet, not separate subnets.
- ✗
Create an auto mode subnet and let Google Cloud assign the secondary range automatically.
Why it's wrong here
Auto mode does not automatically assign secondary ranges.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNE question from scratch — 961 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.