Free Preparation Discussions
MENU
Google Professional Cloud Network Engineer Exam Questions
- Topic 1: Managing and monitoring network operations/ Designing a container IP addressing plan for Google Kubernetes Engine
- Topic 2: Optimizing network resources/ Load balancer and CDN location/ Designing a hybrid network. Considerations Using interconnect, Failover and disaster recovery strategy
- Topic 3: Designing the overall network architecture. Considerations Hybrid connectivity, Container networking, Options for high availability
- Topic 4: Implementing a GCP Virtual Private Cloud (VPC)/ Creating a shared VPC and explaining how to share subnets with other projects
- Topic 5: Differences between Google Cloud Networking and other cloud platforms/ Designing, planning, and prototyping a GCP network
- Topic 6: Configuring and maintaining Google Kubernetes Engine clusters/ Configuring and maintaining Google Kubernetes Engine clusters
- Topic 7: Configuring GCP VPC resources/ Failover and disaster recovery strategy/ Target network tags and service accounts
- Topic 8: Shared vs. standalone VPC interconnect access/ Choosing the appropriate load balancing options
- Topic 9: Microsegmentation for security purposes/ Designing a Virtual Private Cloud (VPC)/ VPC-native clusters using alias IPs
Free Google Professional Cloud Network Engineer Exam Actual Questions
Note: Premium Questions for Professional Cloud Network Engineer were last updated On Dec. 07, 2024 (see below)
There are two established Partner Interconnect connections between your on-premises network and Google Cloud. The VPC that hosts the Partner Interconnect connections is named "vpc-a" and contains three VPC subnets across three regions, Compute Engine instances, and a GKE cluster. Your on-premises users would like to resolve records hosted in a Cloud DNS private zone following Google-recommended practices. You need to implement a solution that allows your on-premises users to resolve records that are hosted in Google Cloud. What should you do?
Associating the private zone to 'vpc-a' and creating an outbound forwarding policy allows DNS queries to be forwarded from on-premises to Google Cloud DNS. The on-premises DNS servers will forward queries to the entry points created when the forwarding policy was applied to 'vpc-a,' enabling proper name resolution.
Your organization's security team recently discovered that there is a high risk of malicious activities originating from some of your VMs connected to the internet. These malicious activities are currently undetected when TLS communication is used. You must ensure that encrypted traffic to the internet is inspected. What should you do?
Cloud NGFW Enterprise provides TLS inspection to detect and manage threats within encrypted traffic. Configuring firewall rules for TLS inspection enables granular monitoring and filtering, ensuring secure internet traffic.
Your organization recently exposed a set of services through a global external Application Load Balancer. After conducting some testing, you observed that responses would intermittently yield a non-HTTP 200 response. You need to identify the error. What should you do? (Choose 2 answers)
To troubleshoot the intermittent non-HTTP 200 responses, you should enable and review health check logs and log the backend service's responses in Cloud Logging. Reviewing the statusDetails field helps identify the cause of the error. Enabling logging on the load balancer and backend service provides visibility into the issue.
You are designing an IP address scheme for new private Google Kubernetes Engine (GKE) clusters, Due to IP address exhaustion of the RFC 1918 address space in your enterprise, you plan to use privately used public IP space for the new dusters. You want to follow Google-recommended practices, What should you do after designing your IP scheme?
The correct answer is D. Create privately used public IP primary and secondary subnet ranges for the clusters. Create a private GKE cluster with the following options selected: --disable-default-snat, --enable-ip-alias, and --enable-private-nodes.
This answer is based on the following facts:
The other options are not correct because:
Option A is not suitable. Creating RFC 1918 primary and secondary subnet IP ranges for the clusters does not solve the problem of address exhaustion. Re-using the secondary address range for pods across multiple private GKE clusters can cause IP conflicts and routing issues.
Option B is also not suitable. Creating RFC 1918 primary and secondary subnet IP ranges for the clusters does not solve the problem of address exhaustion. Re-using the secondary address range for services across multiple private GKE clusters can cause IP conflicts and routing issues.
Option C is not feasible. Creating privately used public IP primary and secondary subnet ranges for the clusters is a valid step, but creating a private GKE cluster with only --enable-ip-alias and --enable-private-nodes options is not enough. You also need to disable default SNAT to avoid IP conflicts with other public IP addresses on the internet.
You ate planning to use Terraform to deploy the Google Cloud infrastructure for your company, The design must meet the following requirements
* Each Google Cloud project must represent an Internal project that your team Will work on
* After an Internal project is finished, the infrastructure must be deleted
* Each Internal project must have Its own Google Cloud project owner to manage the Google Cloud resources.
* You have 10---100 projects deployed at a time
While you are writing the Terraform code, you need to ensure that the deployment is simple and the code is reusable With
centralized management What should you do?
The correct answer is D because it meets the following requirements:
google_project - Terraform Registry
Managing infrastructure as code with Terraform, Cloud Build, and GitOps | Google Cloud
Automating your automation by Creating Google Cloud Projects Automatically
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Junita
10 hours agoKati
5 days agoAvery
11 days agoGail
15 days agoAleta
19 days agoJenelle
1 months agoJenise
1 months agoMaddie
1 months agoBernardo
1 months agoEmily
2 months agoMona
2 months agoMayra
2 months agoCorazon
2 months agoAdrianna
2 months agoRemona
3 months agoShalon
3 months agoAleisha
3 months agoLera
4 months agoAngelica
4 months agoVeronica
5 months agoJestine
5 months agoLorean
6 months agoQuentin
6 months agoLisha
6 months ago