Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Google Cloud Certified Professional Cloud Network Engineer · Google Cloud
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The correct solution is B: an instance with IP forwarding enabled. This will be configured as a NVA (Network Virtual Appliance) and will perform bi-directional NAT. A non-overlapping address space will be assigned on the VPC facing the on-premises side. A) is not valid, because it fails to fulfill the requirement to perform NAT on behalf of the on-premises workloads (Cloud NAT limitation - it performs NAT only on behalf of the cloud workloads) C) and D) lack the primary requirement of having IP forwarding enabled.
https://cloud.google.com/nat/docs/about-hybrid-nat its type of Private to Private connections using Cloud NAT
A is the answer: Here's why: Cloud NAT: Cloud NAT is Google Cloud's fully managed, software-defined NAT service. It is designed to allow instances in a private VPC network (that don't have external IP addresses) to connect to the internet or, critically, to on-premises networks via Cloud VPN or Cloud Interconnect. Cloud NAT supports two main types: Public NAT (for internet egress) and Private NAT (for private-to-private address translation between VPC networks and on-premises or other cloud provider networks). This means Cloud NAT is explicitly designed for the use case of translating addresses between your on-premises blocks and GCP, especially when you have overlapping IP ranges or need to hide private IP addresses. It's a managed service, offering high availability, scalability, and simplified operations, aligning with best practices.