Courseiva
Implementing VPC InstanceshardMultiple SelectObjective-mapped

PCNE Implementing VPC Instances Practice Question

You are configuring a VPC Service Controls perimeter to protect a project containing BigQuery datasets. Access should be allowed only from a specific VPC network and only for users with a specific access level. Which THREE components must you define? (Choose 3)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Service perimeter

VPC Service Controls perimeters require: 1) A service perimeter that includes the project and services, 2) Access levels that define allowed client attributes (e.g., IP addresses, device policy), and 3) VPC accessible services configuration to restrict access to only requests originating from specified VPC networks. Ingress rules are optional for allowing access from outside the perimeter.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Cloud NAT gateway

    Why it's wrong here

    Not required for VPC Service Controls.

  • Private Google Access

    Why it's wrong here

    Not directly part of VPC Service Controls; it's a subnet setting.

  • Service perimeter

    Why this is correct

    Defines the protected resources.

  • VPC accessible services configuration

    Why this is correct

    Restricts access to only requests from specified VPC networks.

  • Access level

    Why this is correct

    Defines conditions like IP ranges or device policies.

About these practice questions

This PCNE question is part of Courseiva's 961-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.