An organization uses Shared VPC so service projects can place VMs into subnets owned by a host project. Which action must be performed in the host project?

In a Shared VPC setup, the host project is responsible for creating and managing all network resources, including subnets. Service projects then attach to this host project and can provision resources like VMs into these shared subnets. This centralizes network administration and ensures consistent network policies. The incorrect options are: Allowing service projects to create their own subnets without IAM roles would defeat the purpose of centralized control and security offered by Shared VPC. Service projects can only use pre-existing subnets shared with them. Moving VM instances from host project subnets into service projects automatically is not a function of Shared VPC; VM placement is determined during creation. Cloud Router instances are typically created in the host project or a dedicated network project to manage VPNs or Interconnects, not in each service project for shared subnets.