Online Access Free Professional-Cloud-Network-Engineer Exam Questions

You have a Cloud Storage bucket in Google Cloud project XYZ. The bucket contains sensitive data. You need to design a solution to ensure that only instances belonging to VPCs under project XYZ can access the data stored in this Cloud Storage bucket. What should you do?

• A.Configure a VPC Service Controls perimeter around project XYZ, and include storage.googleapis.com as a restricted service in the service perimeter.
• B.Configure Cloud Storage with projectPrivate Access Control List (ACL) that gives permission to the project team based on their roles.
• C.Configure Private Google Access to privately access the Cloud Storage service using private IP addresses.
• D.Configure Private Service Connect to privately access Cloud Storage from all VPCs under project XYZ.

You are migrating to Cloud DNS and want to import your BIND zone file.
Which command should you use?

• A.gcloud dns record-sets import ZONE_FILE --zone-file-format --zone MANAGED_ZONE
• B.gcloud dns record-sets import ZONE_FILE --zone MANAGED_ZONE
• C.gcloud dns record-sets import ZONE_FILE --replace-origin-ns --zone MANAGED_ZONE
• D.gcloud dns record-sets import ZONE_FILE --delete-all-existing --zone MANAGED ZONE

Your software team is developing an on-premises web application that requires direct connectivity to Compute Engine Instances in GCP using the RFC 1918 address space. You want to choose a connectivity solution from your on-premises environment to GCP, given these specifications:
* Your ISP is a Google Partner Interconnect provider.
* Your on-premises VPN device's internet uplink and downlink speeds are 10 Gbps.
* A test VPN connection between your on-premises gateway and GCP is performing at a maximum speed of 500 Mbps due to packet losses.
* Most of the data transfer will be from GCP to the on-premises environment.
* The application can burst up to 1.5 Gbps during peak transfers over the Interconnect.
* Cost and the complexity of the solution should be minimal.
How should you provision the connectivity solution?

• A.Provision a Partner Interconnect through your ISP.
• B.Use network compression over your VPN to increase the amount of data you can send over your VPN.
• C.Provision a Dedicated Interconnect instead of a VPN.
• D.Create multiple VPN tunnels to account for the packet losses, and increase bandwidth using ECMP.

You are migrating a three-tier application architecture from on-premises to Google Cloud. As a first step in the migration, you want to create a new Virtual Private Cloud (VPC) with an external HTTP(S) load balancer.
This load balancer will forward traffic back to the on-premises compute resources that run the presentation tier. You need to stop malicious traffic from entering your VPC and consuming resources at the edge, so you must configure this policy to filter IP addresses and stop cross-site scripting (XSS) attacks. What should you do?

• A.Create a hierarchical firewall ruleset, and apply it to the VPC's parent organization resource node.
• B.Create a Google Cloud Armor policy, and apply it to a backend service that uses an internet network endpoint group (NEG) backend.
• C.Create a VPC firewall ruleset, and apply it to all instances in unmanaged instance groups.
• D.Create a Google Cloud Armor policy, and apply it to a backend service that uses an unmanaged instance group backend.

Your team deployed two applications in GKE that are exposed through an external Application Load Balancer. When queries are sent to www.mountkirkgames.com/sales and www.mountkirkgames.com/get-an- analysis, the correct pages are displayed. However, you have received complaints that www.mountkirkgames.
com yields a 404 error. You need to resolve this error. What should you do?

• A.Review the Ingress YAML file. Add a new path rule for the * character that directs to the base service.
  Reapply the YAML.
• B.Review the Ingress YAML file. Define the default backend. Reapply the YAML.
• C.Review the Service YAML file. Add a new path rule for the * character that directs to the base service.Reapply the YAML.
• D.Review the Service YAML file. Define a default backend. Reapply the YAML.