Professional-Cloud-Network-Engineer Practice Online

Question 1

Your company has 10 separate Virtual Private Cloud (VPC) networks, with one VPC per project in a single region in Google Cloud. Your security team requires each VPC network to have private connectivity to the main on-premises location via a Partner Interconnect connection in the same region. To optimize cost and operations, the same connectivity must be shared with all projects. You must ensure that all traffic between different projects, on-premises locations, and the intemet can be inspected using the same third-party appliances. What should you do?

A : Configure the third-party appliances with multiple interfaces and specific Partner Interconnect VLAN attachments per project. Create the relevant routes on the third-party appliances and VPC networks.

B : Configure the third-party appliances with multiple interfaces, with each interface connected to a separate VPC network. Create separate VPC networks for on- premises and internet connectivity. Create the relevant routes on the third-party appliances and VPC networks.

C : Consolidate all existing projects' subnetworks into a single VPC. Create separate VPC networks for on-premises and intemet connectivity. Configure the third-party appliances with multiple interfaces, with each interface connected to a separate VPC network. Create the relevant routes on the third-party appliances and VPC networks.

D : Configure the third-party appliances with multiple interfaces. Create a hub VPC network for all projects, and create separate VPC networks for on-premises and internet connectivity. Create the relevant routes on the third-party appliances and VPC networks Use VPC Network Peering to connect all projects' VPC networks to the hub VPC. Export custom routes from the hub VPC and import on all projects' VPC networks.

Answer: B

Question 2

You create a Google Kubernetes Engine private cluster and want to use kubectl to get the status of the pods. In

one of your instances you notice the master is not responding, even though the cluster is up and running.

What should you do to solve the problem?

A : Assign a public IP address to the instance.

B : Create a route to reach the Master, pointing to the default internet gateway.

C : Create the appropriate firewall policy in the VPC to allow traffic from Master node IP address to the instance.

D : Create the appropriate master authorized network entries to allow the instance to communicate to the master.

Answer: D

Question 3

Your company has a single Virtual Private Cloud (VPC) network deployed in Google Cloud with access from your on-premises network using Cloud Interconnect. You must configure access only to Google APIs and services that are supported by VPC Service Controls through hybrid connectivity with a service level agreement (SLA) in place. What should you do?

A : Configure the existing Cloud Routers to advertise the Google API's public virtual IP addresses.

B : Use Private Google Access for on-premises hosts with restricted.googleapis.com virtual IP addresses.

C : Configure the existing Cloud Routers to advertise a default route, and use Cloud NAT to translate traffic from your on-premises network.

D : Add Direct Peering links and use them for connectivity to Google APIs that use public virtual IP addresses

Answer: B

Question 4

You are using a single Cloud Router to exchange routes between your VPC and on-premises network with Dedicated Interconnect. You want to make sure you can still forward traffic, even if all the Cloud Routers in a region go down. What should you do?

A : Create a second Cloud Router in the same region, but with a Border Gateway Protocol (BGP) session to a second on-premises device.

B : Turn on graceful restart on your on-premises router.

C : Turn on global routing in your VPC, and create another Cloud Router in a different region.

D : Use static routes as a backup to Cloud Router.

Answer: C

Question 5

You are migrating to Cloud DNS and want to import your BIND zone file.

Which command should you use?

A : gcloud dns record-sets import ZONE_FILE --zone MANAGED_ZONE

B : gcloud dns record-sets import ZONE_FILE --replace-origin-ns --zone MANAGED_ZONE

C : gcloud dns record-sets import ZONE_FILE --zone-file-format --zone MANAGED_ZONE

D : gcloud dns record-sets import ZONE_FILE --delete-all-existing --zone MANAGED ZONE

Answer: C

Name:	Professional Cloud Network Engineer
Exam Code:	Professional-Cloud-Network-Engineer
Certification:	Google Cloud Certified
Vendor:	Google
Total Questions:	180
Last Updated:	May 08, 2024

Download Demo Professional-Cloud-Network-Engineer Dumps

Create Account

Password Recovery

Professional-Cloud-Network-Engineer Practice Online

Download Demo Professional-Cloud-Network-Engineer Dumps

Member Login

Create Account

Password Recovery

Professional-Cloud-Network-Engineer Practice Online