Google Professional Cloud Network Engineer Exam - Topic 4 Question 112 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam

Question #: 112
Topic #: 4

[All Professional Cloud Network Engineer Questions]

Your organization has resources in two different VPCs, each in different Google Cloud projects, and requires connectivity between the resources in the two VPCs. You have already determined that there is no IP address overlap; however, one VPC uses privately used public IP (PUPI) ranges. You would like to enable connectivity between these resources by using a lower cost and higher performance method. What should you do?

ACreate an HA VPN between the two VPCs that includes the PUPI ranges in the custom route advertisements of the Cloud Router. Create the necessary ingress VPC firewall rules that target the specific resources by using IP ranges as the source filter.

BCreate a VPC Network Peering connection between the two VPCs that allows the export and import of custom routes for public IP addresses. Create the necessary ingress VPC firewall rules that target the specific resources by using service accounts as the source filter.

CCreate a VPC Network Peering connection between the two VPCs that allows the export and import of subnet routes with public IP addresses. Create the necessary ingress VPC firewall rules that target the specific resources by using IP ranges as the source filter.

DCreate a VPC Network Peering connection between the two VPCs that allows the export and import of subnet routes with public IP addresses. Create the necessary ingress VPC firewall rules that target the specific resources by using network tags as the source filter.

Show Suggested Answer

Suggested Answer: C

VPC Network Peering is the most cost-effective and high-performance method for connecting two VPCs. Since one VPC uses privately used public IP (PUPI) ranges, you need to configure peering to allow the export and import of subnet routes with public IP addresses. Firewall rules can be used to control traffic between the resources.

by Genevieve at Nov 24, 2025, 04:20 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Eileen

7 hours ago

I think A is more reliable with HA VPN.

upvoted 0 times

...

Dyan

5 days ago

Option B seems like the best choice for custom routes.

upvoted 0 times

...

Haydee

11 days ago

I'm just going to close my eyes and point at an answer. That's the only way I'm going to get this right.

upvoted 0 times

...

Lanie

16 days ago

Hmm, this seems like a tricky one. I'm going to have to put on my thinking cap for this one.

upvoted 0 times

...

Devora

21 days ago

Wait, what's a PUPI range? Is that like some kind of new Pokemon or something?

upvoted 0 times

...

Katina

26 days ago

Ah, the joys of VPC connectivity. I feel like I need a PhD in networking just to understand this stuff.

upvoted 0 times

...

Santos

1 month ago

This question is a real head-scratcher! I'm scratching my head just trying to figure it out.

upvoted 0 times

...

Emilio

1 month ago

I lean towards option C since it talks about subnet routes, but I’m not entirely sure if it’s the best choice for handling public IPs. I need to double-check the firewall rules too.

upvoted 0 times

...

Hermila

1 month ago

I think option A sounds right because it mentions HA VPN, which I remember is good for performance. But I'm a bit confused about the PUPI ranges and how they fit in.

upvoted 0 times

...

Colette

2 months ago

I practiced a similar question where we had to choose between VPN and peering. I feel like peering is usually the cheaper option, but I can't recall the specifics about the firewall rules.

upvoted 0 times

...

Becky

2 months ago

Alright, I think I've got a handle on this. Based on the requirements, Option C looks like the way to go. VPC Network Peering with public IP address subnet route exchange seems like the most straightforward and cost-effective solution. Now I just need to make sure I understand the firewall rule setup correctly.

upvoted 0 times

...

Portia

2 months ago

I'm a bit confused by the PUPI ranges and how that impacts the connectivity. I think I need to understand that concept better before I can decide on the best approach. Maybe I'll start by researching PUPI and how it differs from normal public IP addresses.

upvoted 0 times

...

Tanesha

2 months ago

I agree, but option A could work too. HA VPN is reliable.

upvoted 0 times

...

Mireya

2 months ago

I remember studying VPC peering, but I'm not sure if it supports PUPI ranges. I think it might be a good option, though.

upvoted 0 times

...

Rosendo

2 months ago

I think option B is the best choice. Network peering is efficient.

upvoted 0 times

...

Kimbery

3 months ago

I disagree, C doesn't seem to address the PUPI issue properly.

upvoted 0 times

...

Truman

3 months ago

Okay, let me see. I think the key is figuring out how to handle the PUPI ranges in the VPC. Option A mentions using a Cloud Router, which could work, but I'm not sure if that's the "lower cost" part. I'll need to look into that more.

upvoted 0 times

...

Jonelle

3 months ago

Hmm, this seems like a tricky one. I'll need to carefully read through the options and think about the key requirements - connectivity between VPCs, no IP overlap, and using a lower cost/higher performance method.

upvoted 0 times

Jestine

3 months ago

I think option B could be a good choice. Network peering sounds efficient.

upvoted 0 times

...