Question 1

You have provisioned a Partner Interconnect connection to extend connectivity from your on-premises data center to Google Cloud. You need to configure a Cloud Router and create a VLAN attachment to connect to resources inside your VPC. You need to configure an Autonomous System number (ASN) to use with the associated Cloud Router and create the VLAN attachment. What should you do?

Options :

A : Use a 4-byte private ASN 4200000000-4294967294.

B : Use a 2-byte private ASN 64512-65535.

C : Use a public Google ASN 15169.

D : Use a public Google ASN 16550.

Answer: B

Question 2

You are designing the network architecture for your organization. Your organization has three developer teams: Web, App, and Database. All of the developer teams require access to Compute Engine instances to perform their critical tasks. You are part of a small network and security team that needs to provide network access to the developers. You need to maintain centralized control over network resources, including subnets, routes, and firewalls. You want to minimize operational overhead. How should you design this topology?

Options :

A : Configure a host project with a Shared VPC. Create service projects for Web, App, and Database.

B : Configure one VPC for Web, one VPC for App, and one VPC for Database. Configure HA VPN between each VPC.

C : Configure three Shared VPC host projects, each with a service project: one for Web, one for App, and one for Database.

D : Configure one VPC for Web, one VPC for App, and one VPC for Database. Use VPC Network Peering to connect all VPCs in a full mesh.

Answer: C

Question 3

You need to restrict access to your Google Cloud load-balanced application so that only specific IP addresses can connect. What should you do?

Options :

A : Create a secure perimeter using the Access Context Manager feature of VPC Service Controls and restrict access to the source IP range of the allowed clients and Google health check IP ranges.

B : Create a secure perimeter using VPC Service Controls, and mark the load balancer as a service restricted to the source IP range of the allowed clients and Google health check IP ranges.

C : Tag the backend instances "application," and create a firewall rule with target tag "application" and the source IP range of the allowed clients and Google health check IP ranges.

D : Label the backend instances "application," and create a firewall rule with the target label "application" and the source IP range of the allowed clients and Google health check IP ranges.

Answer: C

Question 4

You are creating an instance group and need to create a new health check for HTTP(s) load balancing. Which two methods can you use to accomplish this? (Choose two.)

Options :

A : Create a new health check using the gcloud command line tool.

B : Create a new health check using the VPC Network section in the GCP Console.

C : Create a new health check, or select an existing one, when you complete the load balancer’s backend configuration in the GCP Console.

D : Create a new legacy health check using the gcloud command line tool.

E : Create a new legacy health check using the Health checks section in the GCP Console.

Answer: A,C

Question 5

You need to create a new VPC network that allows instances to have IP addresses in both the 10.1.1.0/24 network and the 172.16.45.0/24 network. What should you do?

Options :

A : Configure global load balancing to point 172.16.45.0/24 to the correct instance.

B : Create unique DNS records for each service that sends traffic to the desired IP address.

C : Configure an alias-IP range of 172.16.45.0/24 on the virtual instances within the VPC subnet of 10.1.1.0 /24.c

D : Use VPC peering to allow traffic to route between the 10.1.0.0/24 network and the 172.16.45.0/24 network.

Answer: C

Free Professional-Cloud-Network-Engineer Mock Exam – Practice Online Confidently

Buying Options: