Your company is running a high-traffic API on GKE Enterprise. You want to prevent data exfiltration by ensuring that pods in your cluster can only communicate with authorized Google APIs and that no traffic can reach the public internet except through specific gateways. Which tool is designed for this?

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

What is the primary difference between 'Auto mode' and 'Custom mode' VPC networks in Google Cloud?

Which Google Cloud feature allows you to connect two VPC networks internally using private IP addresses, even if they are in different projects or organizations?

What is the purpose of 'Private Google Access' for a subnet?

An administrator wants to share a single VPC network and its subnets with multiple projects in their organization. Which feature should they use?