Question 6 of 169
Choose 2You are using a third-party next-generation firewall to inspect traffic. You created a custom route of 0.0.0.0/0 to route egress traffic to the firewall. You want to allow your VPC instances without public IP addresses to access the BigQuery and Cloud Pub/Sub APIs, without sending the traffic through the firewall.
Which two actions should you take? (Choose two.)
Which two actions should you take? (Choose two.)
✓ATurn on Private Google Access at the subnet level.
BTurn on Private Google Access at the VPC level.
CTurn on Private Services Access at the VPC level.
✓DCreate a set of custom static routes to send traffic to the external IP addresses of Google APIs and services via the default internet gateway.
ECreate a set of custom static routes to send traffic to the internal IP addresses of Google APIs and services via the default internet gateway.
✓
Correct Answer: A, D
Turn on Private Google Access at the subnet level.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.