Online Access Free Professional-Cloud-Network-Engineer Exam Questions

You have provisioned a Partner Interconnect connection to extend connectivity from your on-premises data center to Google Cloud. You need to configure a Cloud Router and create a VLAN attachment to connect to resources inside your VPC. You need to configure an Autonomous System number (ASN) to use with the associated Cloud Router and create the VLAN attachment.
What should you do?

• A.Use a 2-byte private ASN 64512-65535.
• B.Use a public Google ASN 15169.
• C.Use a public Google ASN 16550.
• D.Use a 4-byte private ASN 4200000000-4294967294.

Your organization uses a hub-and-spoke architecture with critical Compute Engine instances in your Virtual Private Clouds (VPCs). You are responsible for the design of Cloud DNS in Google Cloud. You need to be able to resolve Cloud DNS private zones from your on-premises data center and enable on-premises name resolution from your hub-and-spoke VPC design. What should you do?

• A.Configure a DNS policy in the spoke VPCs, and configure your on-premises DNS as an alternate DNS server.
  Configure the hub VPC with a private zone, and set up DNS peering to each of the spoke VPCs.
• B.Configure a private DNS zone in the hub VPC, and configure DNS forwarding to the on-premises server.
  Configure DNS peering from the spoke VPCs to the hub VPC.
• C.Configure a DNS policy in the hub VPC, and configure the on-premises DNS as an alternate DNS server.
  Configure the spoke VPCs with a private zone, and set up DNS peering to the hub VPC.
• D.Configure a DNS policy in the hub VPC to allow inbound query forwarding from the spoke VPCs.
  Configure the spoke VPCs with a private zone, and set up DNS peering to the hub VPC.

You need to create the network infrastructure to deploy a highly available web application in the us-east1 and us-west1 regions. The application runs on Compute Engine instances, and it does not require the use of a database. You want to follow Google-recommended practices. What should you do?

• A.Create one VPC with one subnet in each region.
  Create a global load balancer with a static IP address.
  Enable Cloud CDN and Google Cloud Armor on the load balancer.
  Create an A record using the IP address of the load balancer in Cloud DNS.
• B.Create one VPC with one subnet in each region.
  Create an HTTP(S) load balancer with a static IP address.
  Choose the standard tier for the network.
  Enable Cloud CDN on the load balancer.
  Create a CNAME record using the load balancer's IP address in Cloud DNS.
• C.Create one VPC with one subnet in each region.
  Create a regional network load balancer in each region with a static IP address.
  Enable Cloud CDN on the load balancers.
  Create an A record in Cloud DNS with both IP addresses for the load balancers.
• D.Create one VPC in each region, and peer both VPCs.
  Create a global load balancer.
  Enable Cloud CDN on the load balancer.
  Create a CNAME for the load balancer in Cloud DNS.

Your organization is running out of private IPv4 IP addresses. You need to create a new design pattern to reduce IP usage in your Google Kubernetes Engine clusters. Each new GKE cluster should have a unique /24 range of routable RFC1918 IP addresses. What should you do?

• A.Q Share the primary and secondary ranges between multiple clusters.
• B.Q Use dual stack IPv4/IPv6 clusters, and assign IPv6 ranges for Pods and Services.
• C.Q Configure NAT by using the IP masquerading agent in the GKE cluster.
• D.Q Configure the secondary ranges outside the RFC1918 space, or use privately used public IPs.

Your organization has a Google Cloud Virtual Private Cloud (VPC) with subnets in us-east1, us-west4, and europe-west4 that use the default VPC configuration. Employees in a branch office in Europe need to access the resources in the VPC using HA VPN. You configured the HA VPN associated with the Google Cloud VPC for your organization with a Cloud Router deployed in europe-west4. You need to ensure that the users in the branch office can quickly and easily access all resources in the VPC. What should you do?

• A.Configure each subnet's VPN connections to use Cloud VPN to connect to the branch office.
• B.Configure the VPC dynamic routing mode to Global.
• C.Create custom advertised routes for each subnet.
• D.Set the advertised routes to Global for the Cloud Router.