For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeGCP Professional Cloud ArchitectGCP Professional Cloud Architect Practice Exam 3Question 23
    Medium1 markMultiple Choice
    Domain 2: Managing and Provisioning a Solution InfrastructureDomain 2Shared VPCNetworkingSeparation of Duties

    GCP PCA · Question 23 · Domain 2: Managing and Provisioning a Solution Infrastructure

    Your company is deploying a multi-tier application across several GCP projects. The security team mandates that all network resources (subnets, firewalls, routes) must be centrally managed by the network engineering team, but the application developers should be able to create VMs in their own projects. Which networking architecture should you implement?

    Answer options:

    A.

    Implement VPC Network Peering between the developer projects and a central network project.

    B.

    Implement a Shared VPC. Designate a central project as the Host Project and the developer projects as Service Projects.

    C.

    Use Cloud VPN to connect the developer projects together.

    D.

    Give the network engineering team the 'Compute Network Admin' role in every developer project.

    How to approach this question

    Look for 'centralized network management' + 'multiple projects'. This is the exact definition of a Shared VPC.

    Full Answer

    B.Implement a Shared VPC. Designate a central project as the Host Project and the developer projects as Service Projects.✓ Correct
    Implement a Shared VPC. Designate a central project as the Host Project and the developer projects as Service Projects.
    Shared VPC is a core GCP networking concept. It designates one project as the 'Host Project' where the VPC, subnets, and firewall rules live. Other projects are attached as 'Service Projects'. Developers in Service Projects can create VMs and attach them to the subnets in the Host Project, achieving separation of duties.

    Common mistakes

    Confusing Shared VPC with VPC Peering (A). Peering is decentralized (two independent networks talking). Shared VPC is centralized (one network shared by many projects).
    Question 22All questionsQuestion 24

    Practice the full GCP Professional Cloud Architect Practice Exam 3

    50 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01**CASE STUDY: TechStream Gaming** **Company Overview:** TechStream Gaming is a global gaming com...MediumQ02**CASE STUDY: TechStream Gaming** **Company Overview:** TechStream Gaming is a global gaming com...HardQ03**CASE STUDY: TechStream Gaming** **Company Overview:** TechStream Gaming is a global gaming com...MediumQ04**CASE STUDY: TechStream Gaming** **Company Overview:** TechStream Gaming is a global gaming com...EasyQ05**CASE STUDY: TechStream Gaming** **Company Overview:** TechStream Gaming is a global gaming com...Medium
    View all 50 questions →