PCNE Implementing a Virtual Private Cloud Practice Question
A company has VPC peering between two VPC networks. They want to ensure that traffic from VPC A to VPC B can use a custom route in VPC A that points to a next-hop appliance in VPC A. Which TWO conditions must be met?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VPC peering must be set up with 'export custom routes' enabled from VPC A.
Required because custom routes must be exported from VPC A to VPC B via peering. This allows VPC B to learn the route and send return traffic back through the same appliance, ensuring bidirectional communication via the appliance. Without exporting custom routes, VPC B would send return traffic directly via the peering connection, bypassing the appliance. Option E is required because VPC A must have a route that specifies the destination inside VPC B and sets the next-hop to the appliance. This route is what directs the traffic from VPC A to VPC B through the appliance. Options A, C, and D are not necessary for the forward path: VPC B does not need a route back (the return path is handled via export), the appliance can be in any region (it just needs connectivity), and a firewall rule on the appliance is needed but is not a condition specific to using the custom route via peering.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
VPC B must have a route back to VPC A.
Why it's wrong here
Return path is not required for the forward path condition.
- ✓
VPC peering must be set up with 'export custom routes' enabled from VPC A.
Why this is correct
Export of custom routes is required for the peer to see and use them.
- ✗
The appliance must be in the same region as VPC A.
Why it's wrong here
The appliance can be in any region within VPC A; region does not affect route usage.
- ✗
The appliance must have a firewall rule allowing traffic from VPC B.
Why it's wrong here
Firewall rules are needed but not specific to the custom route export condition.
- ✓
VPC A must have a route with destination inside VPC B and next-hop set to the appliance.
Why this is correct
This is the custom route directing traffic to the appliance.
Go deeper
Related to this question
About these practice questions
One of 961 original PCNE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.