You deploy VMs without external IPs that must call Google Cloud Storage and other Google APIs. Which network setting is required to allow those VMs to reach Google APIs privately?
Choose an answer
Tap an option to check your answer.
Correct answer: Enable Private Google Access on the subnet where the VMs reside..
Why this is the answer
Enabling Private Google Access on the subnet allows VMs without external IP addresses to reach Google APIs and services using internal IP addresses. This provides a secure and private connection without exposing the VMs to the internet. Creating a Cloud NAT gateway would allow VMs to access external services, but it's not the most private or direct method for Google APIs when Private Google Access is available. Attaching an external IPv6 address would give the VMs public reachability, which contradicts the requirement for private access. VPC peering with googleapis.com is not a standard or supported method for connecting to Google APIs; Private Google Access handles this functionality internally within Google Cloud.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed