PCNE Private Google Access Practice Question
A developer wants to create a VM that can communicate with all Google APIs without requiring an external IP address. Which configuration is necessary?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable Private Google Access on the subnet.
To enable a VM to communicate with Google APIs without an external IP, Private Google Access must be enabled on the subnet. This allows instances with only internal IPs to reach Google APIs and services through Google's internal network. Option A (Cloud NAT) provides internet access for non-Google destinations, not specifically for Google APIs. Option B (firewall rule to 0.0.0.0/0) would allow egress to the internet, but the VM still needs an external IP if Private Google Access is not enabled. Option C (VPC peering) is used to connect VPCs, not to access Google APIs. Therefore, Option D is correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a Cloud NAT.
Why it's wrong here
Cloud NAT provides outbound internet to non-Google IPs, not Google APIs.
- ✗
Add a firewall rule to allow egress to 0.0.0.0/0.
Why it's wrong here
Firewall rules control access but do not provide the necessary routing for API access without external IP.
- ✗
Set up VPC peering with the Google APIs service producer.
Why it's wrong here
VPC peering is not used for Google API access; that is Private Google Access.
- ✓
Enable Private Google Access on the subnet.
Why this is correct
Private Google Access allows VMs without external IPs to reach Google APIs.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 961 original PCNE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.