Online Access Free Professional-Cloud-Network-Engineer Exam Questions

Your on-premises data center has 2 routers connected to your GCP through a VPN on each router. All applications are working correctly; however, all of the traffic is passing across a single VPN instead of being load-balanced across the 2 connections as desired.
During troubleshooting you find:
*Each on-premises router is configured with the same ASN.
*Each on-premises router is configured with the same routes and priorities.
*Both on-premises routers are configured with a VPN connected to a single Cloud Router.
*The VPN logs have no-proposal-chosen lines when the VPNs are connecting.
*BGP session is not established between one on-premises router and the Cloud Router.
What is the most likely cause of this problem?

• A.You do not have a load balancer to load-balance the network traffic.
• B.BGP sessions are not established between both on-premises routers and the Cloud Router.
• C.One of the VPN sessions is configured incorrectly.
• D.A firewall is blocking the traffic across the second VPN connection.

Question:
Your organization has an on-premises data center. You need to provide connectivity from the on-premises data center to Google Cloud. Bandwidth must be at least 1 Gbps, and the traffic must not traverse the internet.
What should you do?

• A.Configure Cross-Cloud Interconnect by creating a VLAN attachment, activate the connection, and then submit the pairing key to your service provider.
• B.Configure HA VPN by using high availability gateways and tunnels.
• C.Configure Dedicated Interconnect by creating a VLAN attachment, activate the connection, and submit the pairing key to your service provider.
• D.Configure Partner Interconnect by creating a VLAN attachment, submit the pairing key to your service provider, and activate the connection.

Your company has a single Virtual Private Cloud (VPC) network deployed in Google Cloud with on-premises connectivity already in place. You are deploying a new application using Google Kubernetes Engine (GKE), which must be accessible only from the same VPC network and on-premises locations. You must ensure that the GKE control plane is exposed to a predefined list of on-premises subnets through private connectivity only. What should you do?

• A.Create a GKE public cluster. Configure authorized networks to specify the desired on-premises subnets.
• B.Create a GKE private cluster with a private endpoint for the control plane. Configure VPC Networking Peering export/import routes and custom route advertisements on the Cloud Routers. Configure authorized networks to specify the desired on-premises subnets.
• C.Create a GKE private cluster with a public endpoint for the control plane. Configure VPC Networking Peering export/import routes and custom route advertisements on the Cloud Routers.
• D.Create a GKE private cluster with a private endpoint for the control plane. Configure authorized networks to specify the desired on-premises subnets.

You want to create a service in GCP using IPv6.
What should you do?

• A.Configure a TCP Proxy with the designated IPv6 address.
• B.Configure a global load balancer with the designated IPv6 address.
• C.Configure an internal load balancer with the designated IPv6 address.
• D.Create the instance with the designated IPv6 address.

You are designing a new global application using Compute Engine instances that will be exposed by a global HTTP(S) load balancer. You need to secure your application from distributed denial-of-service and application layer (layer 7) attacks. What should you do?

• A.Configure VPC Service Controls and create a secure perimeter. Define fine-grained perimeter controls and enforce that security posture across your Google Cloud services and projects.
• B.Configure VPC firewall rules to protect the Compute Engine instances against distributed denial-of- service attacks.
• C.Configure hierarchical firewall rules for the global HTTP(S) load balancer public IP address at the organization level.
• D.Configure a Google Cloud Armor security policy in your project, and attach it to the backend service to secure the application.