PCNE Implementing a Virtual Private Cloud Practice Question
An organization is migrating to Google Cloud and requires connectivity between their on-premises network and VPC. They plan to use Cloud VPN with dynamic routing (BGP). Which VPC feature is required for this setup?
⚠ Common exam trap
Test-takers frequently confuse Cloud Router with Cloud NAT or VPC peering, thinking any 'cloud' component or 'peering' term implies connectivity, but only Cloud Router handles the BGP dynamic routing required for Cloud VPN.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cloud Router
Cloud Router is required when using Cloud VPN with dynamic routing (BGP) because it manages the BGP sessions between the on-premises router and the Google Cloud VPN gateway. It exchanges routes dynamically, enabling automatic route propagation and failover without manual static route configuration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cloud NAT
Why it's wrong here
Cloud NAT provides internet access for private instances, not VPN routing.
- ✗
VPC peering
Why it's wrong here
VPC peering connects two VPC networks directly, but it does not terminate an on-premises VPN tunnel or support BGP session establishment with an external gateway. The scenario requires a Cloud VPN gateway with dynamic routing, which VPC peering cannot provide. This option is tempting because VPC peering is commonly used to link separate networks, and one might mistakenly think it can extend connectivity to an on-premises site; it would be correct only for connecting two Google Cloud VPCs without VPN or on-premises involvement.
- ✓
Cloud Router
Why this is correct
Cloud Router manages BGP sessions for dynamic routing with VPN or Interconnect.
- ✗
VPC Flow Logs
Why it's wrong here
Flow Logs record traffic metadata, not routing.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNE question from scratch — 961 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.