Question 187 of 315
Single answerYou are configuring the cloud network architecture for a newly created project in Google Cloud that will host applications in Compute Engine. Compute Engine virtual machine instances will be created in two different subnets (sub-a and sub-b) within a single region:
• Instances in sub-a will have public IP addresses.
• Instances in sub-b will have only private IP addresses.
To download updated packages, instances must connect to a public repository outside the boundaries of Google Cloud. You need to allow sub-b to access the external repository. What should you do?
• Instances in sub-a will have public IP addresses.
• Instances in sub-b will have only private IP addresses.
To download updated packages, instances must connect to a public repository outside the boundaries of Google Cloud. You need to allow sub-b to access the external repository. What should you do?
AEnable Private Google Access on sub-b.
✓BConfigure Cloud NAT and select sub-b in the NAT mapping section.
CConfigure a bastion host instance in sub-a to connect to instances in sub-b.
DEnable Identity-Aware Proxy for TCP forwarding for instances in sub-b.
✓
Correct Answer: B
Configure Cloud NAT and select sub-b in the NAT mapping section.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.