Question

Your organization wants to centralize network administration. A single team will manage all subnets, firewall rules, and routes, while application teams deploy Compute Engine instances into these shared subnets from their own projects. You have been asked to configure a Shared VPC. Which sequence correctly enables this design?

Accepted Answer

Enable a project as a Shared VPC host project, attach the application projects as service projects, and grant application teams the Compute Network User role on the specific subnets they need.

Answer

Create a VPC Network Peering connection between the network team's project and each application project, then share firewall rules through a hierarchical firewall policy.

Answer

Designate each application project as a host project and attach the network team's project as a shared service project, then grant Network Admin on the subnets.

Answer

Enable Private Service Connect between the network project and each application project so instances can consume the shared subnets as published services.