Medium1 markMultiple Choice
Domain 2: Managing and Provisioning a Solution InfrastructureDomain 2Shared VPCNetworkingSeparation of Duties

GCP PCA · Question 23 · Domain 2: Managing and Provisioning a Solution Infrastructure

Your company is deploying a multi-tier application across several GCP projects. The security team mandates that all network resources (subnets, firewalls, routes) must be centrally managed by the network engineering team, but the application developers should be able to create VMs in their own projects. Which networking architecture should you implement?

Answer options:

A.

Implement VPC Network Peering between the developer projects and a central network project.

B.

Implement a Shared VPC. Designate a central project as the Host Project and the developer projects as Service Projects.

C.

Use Cloud VPN to connect the developer projects together.

D.

Give the network engineering team the 'Compute Network Admin' role in every developer project.

How to approach this question

Look for 'centralized network management' + 'multiple projects'. This is the exact definition of a Shared VPC.

Full Answer

B.Implement a Shared VPC. Designate a central project as the Host Project and the developer projects as Service Projects.✓ Correct
Shared VPC is a core GCP networking concept. It designates one project as the 'Host Project' where the VPC, subnets, and firewall rules live. Other projects are attached as 'Service Projects'. Developers in Service Projects can create VMs and attach them to the subnets in the Host Project, achieving separation of duties.

Common mistakes

Confusing Shared VPC with VPC Peering (A). Peering is decentralized (two independent networks talking). Shared VPC is centralized (one network shared by many projects).

Practice the full GCP Professional Cloud Architect Practice Exam 3

50 questions · hints · full answers · grading

More questions from this exam