A setting enabled per subnet that lets VMs with only internal IPs reach Google APIs and services, such as Cloud Storage or BigQuery, without external IPs or internet egress.
On the ACE it is chosen when private VMs only need Google APIs. If they also need the general internet, you add Cloud NAT.
Private Google Access is a concept that can show up on the exam. Check the full guide to see it in context.