PCNE Implementing VPC Instances Practice Question
An organization needs to restrict access to Google Cloud APIs such that only traffic from a specific set of VMs inside a VPC can reach the APIs, and all other traffic (including from other VPCs) must be denied. The VMs do not have external IPs. Which combination of services should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Private Google Access and VPC Service Controls
Private Google Access allows VMs without external IPs to reach Google APIs. VPC Service Controls can create a service perimeter that restricts access to APIs from only authorized VPCs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Private Service Connect and VPC Service Controls
Why it's wrong here
Private Service Connect is for privately accessing specific services via endpoints, not for general Google API access.
- ✗
Cloud NAT and VPC Service Controls
Why it's wrong here
Cloud NAT provides internet access but doesn't restrict access to Google APIs; VPC Service Controls can restrict access but requires Private Google Access for VMs without external IPs.
- ✓
Private Google Access and VPC Service Controls
Why this is correct
Private Google Access enables VMs without external IPs to reach Google APIs; VPC Service Controls restrict to the specified VPC.
- ✗
Cloud NAT and Private Google Access
Why it's wrong here
This combination allows outbound internet and Google API access but does not restrict other VPCs from accessing APIs.
Go deeper
Related to this question
About these practice questions
This PCNE question is part of Courseiva's 961-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.