Câu 8: Google Cloud Professional Cloud Network Engineer

You are using a third-party next-generation firewall to inspect traffic. You created a custom route of 0.0.0.0/0 to route egress traffic to the firewall. You want to allow your VPC instances without public IP addresses to access the BigQuery and Cloud Pub/Sub APIs, without sending the traffic through the firewall. Which two actions should you take? (Choose two.)

1. A. Turn on Private Google Access at the subnet level. — đáp án hiện tại
2. B. Turn on Private Google Access at the VPC level.
3. C. Turn on Private Services Access at the VPC level.
4. D. Create a set of custom static routes to send traffic to the external IP addresses of Google APIs and services via the default internet gateway. — đáp án hiện tại
5. E. Create a set of custom static routes to send traffic to the internal IP addresses of Google APIs and services via the default internet gateway.