Practice Test 2 | Google Cloud Certified Professional Cloud Network Engineer | Dumps | Mock Test
An Organization has a VPC with subnets in three regions which are Europe-west1, europe-north1 and us-central1. GCE instances have been deployed, without external IP, into all three subnets. The appropriate firewall rules and routes are in place. A Cloud-NAT resource was created and attached to the VPC in us-central-1. The instances in two subnets are unable to download updates from the internet.
What could be the problem?
A. The firewall rules in the affected subnets do not allow communications with the download sites.
B. There is no route in the affected subnets to the download sites.
C. There is no Cloud NAT in those regions.
D. There is no Cloud Router in those regions
Answer: C
Option A is incorrect, firewall rules are at VPC level also we are told the firewall rules are ok.
Option B is incorrect, one subnet can raise the internet so the routes is not the problem. Also, routes are VPC wide not subnet specific.
Option C is correct, private GCE instances need Cloud NAT to reach the internet.
Option D is incorrect, Cloud Router is used to dynamically exchange route information between two networks.
Comments are closed, but trackbacks and pingbacks are open.