Courseiva
Implementing VPC InstanceseasyMultiple ChoiceObjective-mapped

PCNE Implementing VPC Instances Practice Question

An engineer needs to provide outbound internet access to a set of Compute Engine instances that have only internal IP addresses. The instances must use a static IP address for outbound traffic. Which solution should they implement?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Create a Cloud NAT gateway with static IP address and configure it on the VPC network.

Cloud NAT with manual port allocation allows a static IP to be assigned to the NAT gateway, providing outbound internet access to instances without external IPs.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Create a Cloud NAT gateway with static IP address and configure it on the VPC network.

    Why this is correct

    Cloud NAT provides outbound internet access for instances without external IPs using a static IP.

  • Assign a static external IP to each instance and configure a firewall rule to allow egress.

    Why it's wrong here

    The requirement specifies instances have only internal IPs, so assigning external IPs is not desired.

  • Configure Private Google Access on the subnet to route traffic to Google APIs.

    Why it's wrong here

    Private Google Access only allows access to Google APIs, not general internet.

  • Deploy a Compute Engine instance as a NAT instance with IP forwarding enabled.

    Why it's wrong here

    A custom NAT instance is possible but not the recommended solution; Cloud NAT is the managed service.

Visual reference

Inside (Private) PC-A 10.0.0.1 PC-B 10.0.0.2 NAT Router Outside (Public) 203.0.113.1 Inside Global Server PAT: many private IPs share one public IP via unique port numbers

About these practice questions

This PCNE question is part of Courseiva's 961-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.