Professional-Cloud-Network-Engineer Practice Exam Questions and Answers

A.  

Enable logging on the default Deny Any Firewall Rule.

B.  

Enable logging on the VM Instances that receive traffic.

C.  

Create a logging sink forwarding all firewall logs with no filters.

D.  

Create an explicit Deny Any rule and enable logging on the new rule.

A.  

Configure custom cache keys for the backend service that holds the image file, and clear the Host and Protocol checkboxes-

B.  

Configure Cloud Storage as a custom origin backend to host the image file, and select multi-region as the location type

C.  

Configure versioned IJRLs for each domain to serve users the •mage file before the cache entry expires

D.  

Configure the default time to live (TTL) as O for the image file.

A.  

Choose a region.

B.  

Create firewall rules for health checks

C.  

Reserve a static IP address for the load balancer

D.  

Determine the subnet mask for a proxy-only subnet.

E.  

Determine the subnet mask for Serverless VPC Access.

A.  

• Create a private cluster that uses VPC advanced routes.

•Set the pod and service ranges as /24.

•Set up a network proxy to access the master.

B.  

• Create a VPC-native GKE cluster using GKE-managed IP ranges.

•Set the pod IP range as /21 and service IP range as /24.

•Set up a network proxy to access the master.

C.  

• Create a VPC-native GKE cluster using user-managed IP ranges.

•Enable a GKE cluster network policy, set the pod and service ranges as /24.

•Set up a network proxy to access the master.

•Enable master authorized networks.

D.  

• Create a VPC-native GKE cluster using user-managed IP ranges.

•Enable privateEndpoint on the cluster master.

•Set the pod and service ranges as /24.

•Set up a network proxy to access the master.

•Enable master authorized networks.

A.  

Direct Peering

B.  

Dedicated Interconnect

C.  

Partner Interconnect with a layer 2 partner

D.  

Partner Interconnect with a layer 3 partner

A.  

Create a Connectivity Test by using TCP, the source IP address of your test VM, and the destination IP address of the public SaaS provider. Review the live data plane analysis and take the next steps based on the test results.

B.  

Enable and review Cloud Logging on your Cloud NAT gateway. Look for logs with errors matching the destination IP address of the public SaaS provider.

C.  

Enable the Firewall insights API. Set the deny rule insights observation period to one day. Review the insights to assure there are no firewall rules denying traffic.

D.  

Enable and review Cloud Logging for Cloud Armor. Look for logs with errors matching the destination IP address of the public SaaS provider.

A.  

Create a managed instance group from one of the images of the on-premises servers, and link this instance group to a target pool behind your load balancer.

B.  

Create a target pool, add all backend instances to this target pool, and deploy the target pool behind your load balancer.

C.  

Deploy a third-party virtual appliance as frontend to these servers that will accommodate the significant differences between these backend servers.

D.  

Use GCP's ECMP capability to load-balance traffic to the backend servers by installing multiple equal-priority static routes to the backend servers.

A.  

Upload your public ssh key to the project Metadata.

B.  

Upload your public ssh key to each instance Metadata.

C.  

Create a custom Google Compute Engine image with your public ssh key embedded.

D.  

Use gcloud compute ssh to automatically copy your public ssh key to the instance.

A.  

Ask the partner to install two security appliances in the data center. Configure one VPN connection from each of these devices to Google

Cloud, and ensure that the VPN devices on-premises are in separate racks on separate power and cooling systems.

B.  

Configure two Partner Interconnect connections in one metropolitan area (metro). Make sure the Interconnect connections are placed in

different metro edge availability domains. Configure two VLAN attachments in a single region, and configure regional dynamic routing on

the VPC

C.  

Configure two Partner Interconnect connections in one metro and two connections in another metro Make sure the Interconnect

connections are placed in different metro edge availability domains. Configure two VLAN attachments in one region and two VLAN

attachments in another region, and configure global dynamic routing on the VPC

D.  

Configure two Partner Interconnect connections in one metro and two connections in another metro. Make sure the Interconnect connections are placed in different metro edge availability domains. Configure two VLAN attachments in one region and two VLAN attachments in another region, and configure regional dynamic routing on the VP

C.  

A.  

Use Network Intelligence Center's Connectivity Tests.

B.  

Enable Packet Mirroring on your application and send test traffic.

C.  

Use Network Intelligence Center's Network Topology visualizations.

D.  

Enable VPC Flow Logs and send test traffic.