A company has two independent business units (BU-A and BU-B) that each operate their own Google Cloud projects. They want to share a common set of network resources (e.g., a centralized NAT gateway, firewall rules, and a VPN tunnel to on-premises) while keeping their project-level IAM permissions separate. The network team wants to manage the shared resources from a single host project. What should the network architect implement?

Create a standalone VPC in BU-A's project and use Cloud VPN to connect it to BU-B's project.

Create a Shared VPC in a host project and attach both business-unit projects as service projects.

Create a new VPC in a third project and use VPC peering to connect it to both BU-A and BU-B.

Create a standalone VPC in each project and peer them together using VPC Network Peering.

Google CloudProfessional Cloud Network Engineer

Domain 1Objective 2

1.2 Designing VPC Networks. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 5)

Part of the Section 1: Designing and planning a Google Cloud VPC network (~21% of the exam) domain, which accounts for ~21% of the PROFESSIONAL-CLOUD-NETWORK-ENGINEER exam.

23questions here

5free pages

6concepts

~21%of the exam

Questions 21–23

21foundation · easy
A workload is only deployed in a single region and has strict data-residency requirements that prohibit traffic from leaving that region. Which VPC network configuration is most appropriate?
Select an answer first
22application · medium
A company has two independent business units (BU-A and BU-B) that each operate their own Google Cloud projects. They want to share a common set of network resources (e.g., a centralized NAT gateway, firewall rules, and a VPN tunnel to on-premises) while keeping their project-level IAM permissions separate. The network team wants to manage the shared resources from a single host project. What should the network architect implement?
Select an answer first
23foundation · easy
A company needs to connect two VPC networks so that they can exchange traffic privately using internal IP addresses. The VPCs are in the same organization but in different regions. Which method should be used?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PROFESSIONAL-CLOUD-NETWORK-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-NETWORK-ENGINEER” is a trademark of its owner, used for identification only.

1.2 Designing VPC Networks. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 5)

Questions 21–23

A workload is only deployed in a single region and has strict data-residency requirements that prohibit traffic from leaving that region. Which VPC network configuration is most appropriate?

A company needs to connect two VPC networks so that they can exchange traffic privately using internal IP addresses. The VPCs are in the same organization but in different regions. Which method should be used?

Keep studying — Section 1: Designing and planning a Google Cloud VPC network (~21% of the exam)