Courseiva
Configuring Network ServiceseasyMultiple SelectObjective-mapped

PCNE Configuring Network Services Practice Question

Which TWO configurations can enable VM instances without external IPs to access the internet? (Choose TWO.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

VPC peering with a network that has Cloud NAT

Cloud NAT (Option E) provides source network address translation for VMs in a subnet, enabling outbound internet access without external IPs. VPC peering with a network that has Cloud NAT (Option B) allows VMs to use the NAT of the peered network for internet access. Option A (Direct peering with Google) only provides connectivity to Google services, not the full internet. Option C (Private Google Access) only grants access to Google APIs. Option D (Using a proxy instance with an external IP) is possible but not a native Google Cloud service and requires manual configuration.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Direct peering with Google

    Why it's wrong here

    Direct peering is for on-premises networks to connect to Google, not for VM internet access.

  • VPC peering with a network that has Cloud NAT

    Why this is correct

    Through VPC peering, VMs can use the NAT of the peered network for outbound traffic.

  • Private Google Access

    Why it's wrong here

    Private Google Access only provides access to Google APIs and services, not the general internet.

  • Using a proxy instance with an external IP

    Why it's wrong here

    While technically possible, this is not a native Google Cloud managed service and requires manual configuration of a proxy server.

  • Cloud NAT

    Why this is correct

    Cloud NAT allows VMs without external IPs to reach the internet.

Visual reference

Inside (Private) PC-A 10.0.0.1 PC-B 10.0.0.2 NAT Router Outside (Public) 203.0.113.1 Inside Global Server PAT: many private IPs share one public IP via unique port numbers

About these practice questions

This PCNE question is part of Courseiva's 961-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.