PCNE Configuring Network Services Practice Question
Which TWO are best practices for securing a VPC network? (Choose 2.)
⚠ Common exam trap
Google Cloud often tests the misconception that default firewall rules are secure or that enabling features like Private Google Access or VPC Peering directly improve VPC security, when in fact they serve different purposes and can introduce risks if not configured correctly.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use firewall rules to restrict ingress traffic to only necessary ports and IPs.
Firewall rules are the primary mechanism for controlling ingress traffic in a VPC. By restricting traffic to only necessary ports and source IPs, you minimize the attack surface and enforce the principle of least privilege. This is a fundamental security best practice for network segmentation and access control.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use VPC Network Peering to connect to other projects.
Why it's wrong here
Peering is a connectivity option, not a security best practice.
- ✗
Create a VPC with default firewall rules.
Why it's wrong here
Default firewall rules may be too permissive.
- ✗
Enable Private Google Access on all subnets.
Why it's wrong here
Private Google Access is for accessing Google APIs privately, not primarily a security control.
- ✓
Use firewall rules to restrict ingress traffic to only necessary ports and IPs.
Why this is correct
This minimizes attack surface.
- ✓
Enable VPC Flow Logs to monitor traffic patterns.
Why this is correct
Flow logs help detect anomalies.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNE question from scratch — 961 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.