Professional-Cloud-Network-Engineer Practice Test

You recently deployed two network virtual appliances in us-central1. Your network
appliances provide connectivity to your on-premises network, 10.0.0.0/8. You need to
configure the routing for your Virtual Private Cloud (VPC). Your design must meet the
following requirements:
All access to your on-premises network must go through the network virtual appliances.
Allow on-premises access in the event of a single network virtual appliance failure.
Both network virtual appliances must be used simultaneously.
Which method should you use to accomplish this?

A.

Configure two routes for 10.0.0.0/8 with different priorities, each pointing to separate
network virtual appliances.

B.

Configure an internal HTTP(S) load balancer with the two network virtual appliances as
backends. Configure a route for 10.0.0.0/8 with the internal HTTP(S) load balancer as the next hop.

C.

Configure a network load balancer for the two network virtual appliances. Configure a
route for 10.0.0.0/8 with the network load balancer as the next hop.

D.

Configure an internal TCP/UDP load balancer with the two network virtual appliances as
backends. Configure a route for 10.0.0.0/8 with the internal load balancer as the next hop.

Your company is working with a partner to provide a solution for a customer. Both your
company and the partner organization are using GCP. There are applications in the
partner's network that need access to some resources in your company's VPC. There is no
CIDR overlap between the VPCs.
Which two solutions can you implement to achieve the desired results without
compromising the security? (Choose two.)

A.

VPC peering

B.

Shared VPC

C.

Cloud VPN

D.

Dedicated Interconnect

E.

Cloud NAT

You create multiple Compute Engine virtual machine instances to be used as TFTP
servers. Which type of load balancer should you use?

A.

HTTP(S) load balancer

B.

SSL proxy load balancer

C.

TCP proxy load balancer

D.

Network load balancer

You are creating a new application and require access to Cloud SQL from VPC instances
without public IP addresses.
Which two actions should you take? (Choose two.)

A.

Activate the Service Networking API in your project

B.

Activate the Cloud Datastore API in your project

C.

Create a private connection to a service producer

D.

Create a custom static route to allow the traffic to reach the Cloud SQL API.

E.

Enable Private Google Access

You recently deployed your application in Google Cloud. You need to verify your Google
Cloud network configuration before deploying your on-premises workloads. You want to
confirm that your Google Cloud network configuration allows traffic to flow from your cloud
resources to your on- premises network. This validation should also analyze and diagnose
potential failure points in your Google Cloud network configurations without sending any
data plane test traffic. What should you do?

A.

Use Network Intelligence Center's Connectivity Tests.

B.

Enable Packet Mirroring on your application and send test traffic

C.

Use Network Intelligence Center's Network Topology visualizations

D.

Enable VPC Flow Logs and send test traffic