GCP-ACE - Ensuring the successful operation of a cloud solution - Section 3.3

Manage networking resources, including resizing a subnet's IP address range, reserving static external or internal IP addresses, adding custom static routes, using Cloud DNS and Cloud NAT, and managing VPC firewall rules and Cloud NGFW policies.

Adjust a live network: expand a subnet's IPv4 range, reserve static external or internal IP addresses, and add custom static routes in a VPC. Use Cloud DNS for name resolution and Cloud NAT to give instances without external addresses outbound access, and maintain firewall rules and Cloud NGFW policies as requirements change.

Subnet IP rangeStatic IP addressesCustom static routesCloud DNSCloud NAT

Practice question for this objective

Free sampleEnsuring the successful operation of a cloud solutionmedium

During planning, an engineer compares reserving a static external IP address with reserving a static internal IP address in a VPC. Which statement accurately distinguishes the two?

  • AA static external address is reachable from the internet, while a static internal address is drawn from a subnet range and routable only within the VPC. Correct
  • BA static external address is a global resource shared across all regions, whereas a static internal address is pinned to one zone within a region.
  • CA static internal address is reachable from the public internet once reserved, while a static external address stays private to the VPC.
  • DBoth address types are billed identically whether attached or idle, because reservation cost never depends on whether the address is in use.
Static external IPs are internet-reachable while static internal IPs come from a subnet range and stay within the VPC. External addresses provide public reachability for a resource, whereas internal addresses are allocated from a subnet's IP range and are routable only within the VPC and networks connected to it.

Why A is correct: External addresses expose a resource publicly, whereas internal addresses come from a subnet's range and are reachable only inside the VPC and its connected networks.

Why B is wrong: It is tempting to map external to global, but regional external addresses are regional resources, so the stated global-versus-zonal split misrepresents them.

Why C is wrong: This inverts the two: internal addresses are routable only within the VPC and connected networks, and external addresses are the ones reachable from the internet.

Why D is wrong: The comparison here is about reachability, and the billing claim is also inaccurate because a reserved external address that sits unattached can incur a charge.

See more GCP-ACE practice questions, answers explained.

More in this domain

Back to all Ensuring the successful operation of a cloud solution objectives, or the GCP-ACE cert hub.

Examworthy is not affiliated with or endorsed by Google Cloud. Original, blueprint-aligned practice material only.