Objective 2.1

PCNE

Configuring VPCs

Objective 2.1 sits in Implementing a VPC network, which carries 20% of the Cloud Network Engineer exam. The questions below are original, written from the official objective title above, and each explanation cites the Google Cloud page it rests on.

Objective title verbatim from the official objectives. Google Cloud exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-1Implementing a VPC network

An engineer sizes a Cloud NAT gateway and needs to know how many TCP source ports a single NAT IP address contributes. What is that figure?

65,536That is the whole space before any exclusion.
64,512Correct · your answerCorrect. The reserved low range is excluded.
65,535Subtracting a single port is not what happens here.
32,768Halving the space describes no rule on this gateway.

Correct.

Concept

A translation pool is smaller than the theoretical port space, since a reserved low range is never handed out as a source port.

Why B

Each NAT IP address offers 64,512 TCP and 64,512 UDP source ports, because of the 65,536 ports per address the well-known range 0 through 1,023 is not used.

Source

Each NAT IP address on a Cloud NAT gateway (both Public NAT and Private NAT) offers 64,512 TCP source ports and 64,512 UDP source ports. TCP and UDP each support 65,536 ports per IP address. Cloud NAT doesn't use the well-known (privileged) ports (0 through 1,023).

Cloud NAT IP addresses and ports, checked August 2026
#gcp#cloud-nat#ports#sizing

Now you: objective 2.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-1Implementing a VPC network

A team has to shrink the set of manually assigned NAT addresses on a gateway without cutting sessions that are already open. Which action fits?

Sample question 2 of 3

2-1Implementing a VPC network

An application needs one VM to keep the same translated address and port whatever the destination, and the team also wants per-VM port counts to grow on demand. What must give?

Sample question 3 of 3

2-1Implementing a VPC network

A partner requires the organization to publish the exact set of source addresses its egress traffic will present. Which Cloud NAT address method meets that?

Full Cloud Network Engineer question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Implementing a VPC network