Question No. 1

You want to configure load balancing for an internet-facing, standard voice-over-IP (VOIP) application.

Which type of load balancer should you use?

AHTTP(S) load balancer

BNetwork load balancer

CInternal TCP/UDP load balancer

DTCP/SSL proxy load balancer

Show Answer

Correct Answer: B

Question No. 2

You have a Cloud Storage bucket in Google Cloud project XYZ. The bucket contains sensitive dat

a. You need to design a solution to ensure that only instances belonging to VPCs under project XYZ can access the data stored in this Cloud Storage bucket. What should you do?

AConfigure Private Google Access to privately access the Cloud Storage service using private IP addresses.

BConfigure a VPC Service Controls perimeter around project XYZ, and include storage.googleapis.com as a restricted service in the service perimeter.

CConfigure Cloud Storage with projectPrivate Access Control List (ACL) that gives permission to the project team based on their roles.

DConfigure Private Service Connect to privately access Cloud Storage from all VPCs under project XYZ.

Show Answer

Correct Answer: C

Question No. 3

You have configured a service on Google Cloud that connects to an on-premises service via a Dedicated Interconnect. Users are reporting recent connectivity issues. You need to determine whether the traffic is being dropped because of firewall rules or a routing decision. What should you do?

AUse the Network Intelligence Center Connectivity Tests to test the connectivity between the VPC and the on-premises network.

BUse Network Intelligence Center Network Topology to check the traffic flow, and replay the traffic from the time period when the connectivity issue occurred.

CConfigure VPC Flow Logs. Review the logs by filtering on the source and destination.

DConfigure a Compute Engine instance on the same VPC as the service running on Google Cloud to run a traceroute targeted at the on-premises service.

Show Answer

Correct Answer: B

Question No. 4

You are configuring the firewall endpoints as part of the Cloud Next Generation Firewall (Cloud NGFW) intrusion prevention service in Google Cloud. You have configured a threat prevention security profile, and you now need to create an endpoint for traffic inspection. What should you do?

ACreate a Private Service Connect endpoint within the zone, associate the endpoint to the VPC network, and use a firewall policy rule to apply the L7 inspection.

BCreate a firewall endpoint within the region, associate the endpoint to the VPC network, and use a firewall policy rule to apply the L7 inspection.

CCreate a firewall endpoint within the zone, associate the endpoint to the VPC network, and use a firewall policy rule to apply the L7 inspection.

DAttach the profile to the VPC network, create a firewall endpoint within the zone, and use a firewall policy rule to apply the L7 inspection.

Show Answer

Correct Answer: C

To apply Layer 7 (L7) inspection for intrusion prevention, you must create a firewall endpoint within the zone where the traffic inspection is required. This endpoint is then associated with the VPC network, and a firewall policy rule is applied for the L7 inspection.

Question No. 5

You decide to set up Cloud NAT. After completing the configuration, you find that one of your instances is not using the Cloud NAT for outbound NAT.

What is the most likely cause of this problem?

AThe instance has been configured with multiple interfaces.

BAn external IP address has been configured on the instance.

CYou have created static routes that use RFC1918 ranges.

DThe instance is accessible by a load balancer external IP address.

Show Answer

Correct Answer: B

Free Google Professional-Cloud-Network-Engineer Exam Actual Questions

The questions for Professional-Cloud-Network-Engineer were last updated On Jan 19, 2025