Question 1

You are maintaining a Shared VPC in a host project. Several departments within your company have infrastructure in different service projects attached to the Shared VPC and use Identity and Access Management (IAM) permissions to manage the cloud resources in those projects. VPC Network Peering is also set up between the Shared VPC and a common services VPC that is not in a service project. Several users are experiencing failed connectivity between certain instances in different Shared VPC service projects and between certain instances and the intemet. You need to validate the network configuration to identify whether a misconfiguration is the root cause of the problem. What should you do?

Options :

A : Review the VPC audit logs in Cloud Logging for the affected instances.

B : Use Secure Shell (SSH) to connect to the affected Compute Engine instances, and run a series of PING tests to the other affected endpoints and the 8.8.8.8 IPv4 address.

C : Run Connectivity Tests from Network Intelligence Center to check connectivity between the affected endpoints in your network and the Internet.

D : Enable VPC Flow Logs for all VPC, and review the logs in Cloud Logging for the affected instances.

Answer: C

Question 2

You are configuring a new HTTP application that will be exposed externally behind both IPv4 and IPv6 virtual IP addresses, using ports 80, 8080, and 443. You will have backends in two regions: us-west1 and us-east1. You want to serve the content with the lowest-possible latency while ensuring high availability and autoscaling, and create native content-based rules using the HTTP hostname and request path. The IP addresses of the clients that connect to the load balancer need to be visible to the backends. Which configuration should you use?

Options :

A : Use Network Load Balancing

B : Use TCP Proxy Load Balancing with PROXY protocol enabled

C : Use External HTTP(S) Load Balancing with URL Maps and custom headers

D : Use External HTTP(S) Load Balancing with URL Maps and an X-Forwarded-For header

Answer: D

Question 3

You are migrating to Cloud DNS and want to import your BIND zone file.

Which command should you use?

Options :

A : gcloud dns record-sets import ZONE_FILE --zone MANAGED_ZONE

B : gcloud dns record-sets import ZONE_FILE --replace-origin-ns --zone MANAGED_ZONE

C : gcloud dns record-sets import ZONE_FILE --zone-file-format --zone MANAGED_ZONE

D : gcloud dns record-sets import ZONE_FILE --delete-all-existing --zone MANAGED ZONE

Answer: C

Question 4

You recently noticed a recurring daily spike in network usage in your Google Cloud project. You need to identify the virtual machine NM) instances and type of traffic causing the spike in traffic utilization while minimizing the cost and management overhead required. What should you do?

Options :

A : Enable VPC Flow Logs and send the output to BigQuery for analysis

B : Enable Firewall Rules Logging for all allowed traffic and send the output to BigQuery for analysis

C : Configure Packet Mirroring to send all traffic to a VM. Use Wireshark on the VM to identity traffic utilization for each VM in the VPC.

D : Deploy a third-party network appliance and configure it as the default gateway. Use the third-party network appliance to identify users with high network traffic.

Answer: C

Question 5

You built a web application with several containerized microservices. You want to run those microservices on Cloud Run. You must also ensure that the services are highly available to your customers with low latency. What should you do?

Options :

A : Deploy the Cloud Run services to multiple availability zones. Create a global TCP load balancer. Add the Cloud Run endpoints to its backend service

B :

Deploy the Cloud Run services to multiple regions. Create serverless network endpoint groups (NEGs) that point to the services. Create a global HTTPS load balancer, and attach the serverless NEGs as backend services of the load balancer.

C : Deploy the Cloud Run services to multiple availability zones. Create Cloud Endpoints that point to the services. Create a global HTTPS load balancer, and attach the Cloud Endpoints to its backend

D : Deploy the Cloud Run services to multiple regions. Configure a round-robin A record in Cloud DNS.

Answer: B

Higher Test Marks with Free Online Professional-Cloud-Network-Engineer Exam Practice

Buying Options: