Online Professional-Cloud-Network-Engineer Practice TestMore Google Products >

Free Google Professional-Cloud-Network-Engineer Exam Dumps Questions

Google Professional-Cloud-Network-Engineer: Google Cloud Certified - Professional Cloud Network Engineer

- Get instant access to Professional-Cloud-Network-Engineer practice exam questions

- Get ready to pass the Google Cloud Certified - Professional Cloud Network Engineer exam right now using our Google Professional-Cloud-Network-Engineer exam package, which includes Google Professional-Cloud-Network-Engineer practice test plus an Google Professional-Cloud-Network-Engineer Exam Simulator.

- The best online Professional-Cloud-Network-Engineer exam study material and preparation tool is here.

4.5

(6000 ratings)

Question 1

Your company has a Virtual Private Cloud (VPC) with two Dedicated Interconnect connections in two different regions: us-west1 and us-east1. Each Dedicated Interconnect connection is attached to a Cloud Router in its respective region by a VLAN attachment. You need to configure a high availability failover path. By default, all ingress traffic from the on-premises environment should flow to the VPC using the us-west1 connection. If us-west1 is unavailable, you want traffic to be rerouted to us-east1. How should you configure the multi-exit discriminator (MED) values to enable this failover path?

A. Use regional routin

B. Set the us-east1 Cloud Router to a base priority of 100, and set the us-west1 CloudRouter to a base priority of 1

C. Use global routin

D. Set the us-east1 Cloud Router to a base priority of 100, and set the us-west1 Cloud Router to a base priority of 1

E. Use regional routin

F. Set the us-east1 Cloud Router to a base priority of 1000, and set the us-west1 Cloud Router to a base priority of 1

G. Use global routin

H. Set the us-east1 Cloud Router to a base priority of 1000, and set the us-west1 Cloud Router to a base priority of 1

Correct Answer:A

Question 2

Your company has a single Virtual Private Cloud (VPC) network deployed in Google Cloud with on-premises connectivity already in place. You are deploying a new application using Google Kubernetes Engine (GKE), which must be accessible only from the same VPC network and on-premises locations. You must ensure that the GKE control plane is exposed to a predefined list of on-premises subnets through private connectivity only. What should you do?

A. Create a GKE private cluster with a private endpoint for the control plan

B. Configure VPC Networking Peering export/import routes and custom route advertisements on the Cloud Router

C. Configure authorized networks to specify the desired on-premises subnets.

D. Create a GKE private cluster with a public endpoint for the control plan

E. Configure VPC Networking Peering export/import routes and custom route advertisements on the Cloud Routers.

F. Create a GKE private cluster with a private endpoint for the control plan

G. Configure authorized networks to specify the desired on-premises subnets.

H. Create a GKE public cluste

I. Configure authorized networks to specify the desired on-premises subnets.

Correct Answer:C

Question 3

All the instances in your project are configured with the custom metadata enable-oslogin value set to FALSE and to block project-wide SSH keys. None of the instances are set with any SSH key, and no project-wide SSH keys have been configured. Firewall rules are set up to allow SSH sessions from any IP address range. You want to SSH into one instance.
What should you do?

A. Open the Cloud Shell SSH into the instance using gcloud compute ssh.

B. Set the custom metadata enable-oslogin to TRUE, and SSH into the instance using a third-party tool like putty or ssh.

C. Generate a new SSH key pai

D. Verify the format of the private key and add it to the instanc

E. SSH into the instance using a third-party tool like putty or ssh.

F. Generate a new SSH key pai

G. Verify the format of the public key and add it to the projec

H. SSH into the instance using a third-party tool like putty or ssh.

Correct Answer:A

Question 4

You want to create a service in GCP using IPv6. What should you do?

A. Create the instance with the designated IPv6 address.

B. Configure a TCP Proxy with the designated IPv6 address.

C. Configure a global load balancer with the designated IPv6 address.

D. Configure an internal load balancer with the designated IPv6 address.

Correct Answer:C
https://cloud.google.com/load-balancing/docs/load-balancing-overview mentions to use global load balancer for IPv6 termination.

Question 5

Your company has recently expanded their EMEA-based operations into APAC. Globally distributed users report that their SMTP and IMAP services are slow. Your company requires end-to-end encryption, but you do not have access to the SSL certificates.
Which Google Cloud load balancer should you use?

A. SSL proxy load balancer

B. Network load balancer

C. HTTPS load balancer

D. TCP proxy load balancer

Correct Answer:D
https://cloud.google.com/security/encryption-in-transit/ Automatic encryption between GFEs and backends For the following load balancer types, Google automatically encrypts traffic between Google Front Ends (GFEs) and your backends that reside within Google Cloud VPC networks: HTTP(S) Load Balancing TCP Proxy Load Balancing SSL Proxy Load Balancing

Question 6

In your Google Cloud organization, you have two folders: Dev and Prod. You want a scalable and consistent way to enforce the following firewall rules for all virtual machines (VMs) with minimal cost:
Port 8080 should always be open for VMs in the projects in the Dev folder.
Any traffic to port 8080 should be denied for all VMs in your projects in the Prod folder. What should you do?

A. Create and associate a firewall policy with the Dev folder with a rule to open port 8080. Create and associate a firewall policy with the Prod folder with a rule to deny traffic to port 8080.

B. Create a Shared VPC for the Dev projects and a Shared VPC for the Prod project

C. Create a VPC firewall rule to open port 8080 in the Shared VPC for De

D. Create a firewall rule to deny traffic to port 8080 in the Shared VPC for Pro

E. Deploy VMs to those Shared VPCs.

F. In all VPCs for the Dev projects, create a VPC firewall rule to open port 8080. In all VPCs for the Prod projects, create a VPC firewall rule to deny traffic to port 8080.

G. Use Anthos Config Connector to enforce a security policy to open port 8080 on the Dev VMs and deny traffic to port 8080 on the Prod VMs.

Correct Answer:A

START Professional-Cloud-Network-Engineer EXAM