A company has a VPC with private instances that need to access Google Cloud APIs (e.g., Cloud Storage, BigQuery) without going through the public internet. They want to ensure that the traffic stays within Google's network. What should they configure?

A VPC peering connection to a Google-managed VPC

Private Google Access on the subnet

A firewall rule to allow traffic to Google APIs

A company is designing a new VPC for a multi-tier application. They have the following requirements: the web tier must be publicly accessible, the application tier must be private, and the database tier must be private and isolated from the application tier. They want to minimize the number of subnets. What is the most appropriate VPC design?

One VPC with two subnets: one public for the web tier and one private for both the application and database tiers

One VPC with one subnet for all tiers

One VPC with three subnets: one public for the web tier, one private for the application tier, and one private for the database tier

Two VPCs: one public for the web tier and one private for the application and database tiers

A company has an internal web application hosted on a Compute Engine instance in a VPC. The instance has no external IP address. They want to allow only authenticated employees to access the application from the internet. What should they configure?

A Cloud NAT to provide the instance with an external IP address

A Cloud VPN tunnel for employees to connect to the VPC

A firewall rule to allow traffic from the internet to the instance

An external HTTP(S) load balancer with IAP enabled

A company has two VPC networks in the same Google Cloud project: VPC-A and VPC-B. They need to allow communication between instances in VPC-A and VPC-B. They want to minimize administrative overhead and avoid creating complex routing rules. What should they do?

Create a VPC peering connection between VPC-A and VPC-B

Create a Shared VPC and move all instances into it

Set up a Cloud VPN tunnel between the two VPCs

Create a firewall rule to allow traffic between the VPCs

Google CloudProfessional Cloud Architect

Domain 2Objective 1

2.1 Configuring Network Topologies PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 1)

Part of the Managing and provisioning a cloud solution infrastructure domain, which accounts for ~17.5% of the PROFESSIONAL-CLOUD-ARCHITECT exam. Google Cloud does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–9 in this domain), expect 2–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

12concepts

~17.5%of the exam

12 Concepts in This Objective

Hybrid networking with Cloud VPN
Hybrid networking with Cloud Interconnect
Network Address Translation (NAT) for hybrid environments
Multicloud connectivity options
Google Cloud-to-Google Cloud communication
Firewall rules and network security
Cloud Armor for intrusion protection
Identity-Aware Proxy (IAP) for access control
VPC design principles
Load balancing for internet-facing services
Load balancing for internal services
Access to cloud and cloud-adjacent services

Questions 1–5

1application · medium
A company has a VPC with private instances that need to access Google Cloud APIs (e.g., Cloud Storage, BigQuery) without going through the public internet. They want to ensure that the traffic stays within Google's network. What should they configure?
Select an answer first
2application · medium
A company is designing a new VPC for a multi-tier application. They have the following requirements: the web tier must be publicly accessible, the application tier must be private, and the database tier must be private and isolated from the application tier. They want to minimize the number of subnets. What is the most appropriate VPC design?
Select an answer first
3application · medium
A company has an internal web application hosted on a Compute Engine instance in a VPC. The instance has no external IP address. They want to allow only authenticated employees to access the application from the internet. What should they configure?
Select an answer first
4application · easy
A company has two VPC networks in the same Google Cloud project: VPC-A and VPC-B. They need to allow communication between instances in VPC-A and VPC-B. They want to minimize administrative overhead and avoid creating complex routing rules. What should they do?
Select an answer first
5foundation · easy
In Google Cloud VPC, what is the scope of a subnet?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-ARCHITECT” is a trademark of its owner, used for identification only.

2.1 Configuring Network Topologies PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 1)

Questions 1–5

A company has a VPC with private instances that need to access Google Cloud APIs (e.g., Cloud Storage, BigQuery) without going through the public internet. They want to ensure that the traffic stays within Google's network. What should they configure?

A company has an internal web application hosted on a Compute Engine instance in a VPC. The instance has no external IP address. They want to allow only authenticated employees to access the application from the internet. What should they configure?

A company has two VPC networks in the same Google Cloud project: VPC-A and VPC-B. They need to allow communication between instances in VPC-A and VPC-B. They want to minimize administrative overhead and avoid creating complex routing rules. What should they do?

In Google Cloud VPC, what is the scope of a subnet?

Keep studying — Managing and provisioning a cloud solution infrastructure