Professional-Cloud-Network-Engineer Exam Question 61

You have recently been put in charge of managing identity and access management for your organization. You have several projects and want to use scripting and automation wherever possible. You want to grant the editor role to a project member.
Which two methods can you use to accomplish this? (Choose two.)
  • Professional-Cloud-Network-Engineer Exam Question 62

    You need to create a GKE cluster in an existing VPC that is accessible from on-premises. You must meet the following requirements:
    * IP ranges for pods and services must be as small as possible.
    * The nodes and the master must not be reachable from the internet.
    * You must be able to use kubectl commands from on-premises subnets to manage the cluster.
    How should you create the GKE cluster?
  • Professional-Cloud-Network-Engineer Exam Question 63

    You are using a third-party next-generation firewall to inspect traffic. You created a custom route of 0.0.0.0/0 to route egress traffic to the firewall. You want to allow your VPC instances without public IP addresses to access the BigQuery and Cloud Pub/Sub APIs, without sending the traffic through the firewall.
    Which two actions should you take? (Choose two.)
  • Professional-Cloud-Network-Engineer Exam Question 64

    You need to configure a static route to an on-premises resource behind a Cloud VPN gateway that is configured for policy-based routing using the gcloud command.
    Which next hop should you choose?
  • Professional-Cloud-Network-Engineer Exam Question 65

    You need to centralize the Identity and Access Management permissions and email distribution for the WebServices Team as efficiently as possible.
    What should you do?