PCNE Implementing a Virtual Private Cloud Practice Question
A company wants to enable Private Google Access for an on-premises network connected via Cloud VPN. Which configuration step is required?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable Private Google Access on the VPC subnet that hosts the Cloud VPN gateway.
Private Google Access must be enabled on the VPC subnet that hosts the Cloud VPN gateway. This allows on-premises hosts to use internal IPs to access Google APIs through the VPN tunnel. Option B is incorrect because VPC Flow Logs are for logging, not enabling access. Option C is incorrect because a default route to the internet gateway is not required; traffic goes through the VPN. Option D is incorrect because Cloud NAT is for outbound internet from private instances, not for on-premises access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable Private Google Access on the VPC subnet that hosts the Cloud VPN gateway.
Why this is correct
Private Google Access allows on-premises hosts to use internal IP addresses for Google APIs.
- ✗
Enable VPC Flow Logs for the VPN tunnel.
Why it's wrong here
Flow logs do not affect connectivity.
- ✗
Create a default route with next hop set to the internet gateway.
Why it's wrong here
A default route would send traffic to the internet, not through the VPN.
- ✗
Configure a Cloud NAT gateway for the on-premises network.
Why it's wrong here
Cloud NAT is for VPC instances, not on-premises networks.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNE question from scratch — 961 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.