Online Access Free Google.Professional-Cloud-Network-Engineer.v2022-02-17.q85 Practice Test (Page 6)

Professional-Cloud-Network-Engineer Exam Question 21

You have deployed a proof-of-concept application by manually placing instances in a single Compute Engine zone. You are now moving the application to production, so you need to increase your application availability and ensure it can autoscale.
How should you provision your instances?

A.Create a single managed instance group, specify the desired region, and select Multiple zones for the location.

B.Create a managed instance group for each region, select Single zone for the location, and manually distribute instances across the zones in that region.

C.Create an unmanaged instance group in a single zone, and then create an HTTP load balancer for the instance group.

D.Create an unmanaged instance group for each zone, and manually distribute the instances across the desired zones.

Professional-Cloud-Network-Engineer Exam Question 22

You have enabled HTTP(S) load balancing for your application, and your application developers have reported that HTTP(S) requests are not being distributed correctly to your Compute Engine Virtual Machine instances. You want to find data about how the request are being distributed.
Which two methods can accomplish this? (Choose two.)

A.In Stackdriver Monitoring, select Resources > Google Cloud Load Balancers and review the Key Metrics graphs in the dashboard.

B.In Stackdriver Monitoring, create a new dashboard and track the https/backend_request_count metric for the load balancer.

C.In Stackdriver Error Reporting, look for any unacknowledged errors for the Cloud Load Balancers service.

D.On the Load Balancer details page of the GCP Console, click on the Monitoring tab, select your backend service, and look at the graphs.

E.In Stackdriver Monitoring, select Resources > Metrics Explorer and search for https/request_bytes_count metric.

Professional-Cloud-Network-Engineer Exam Question 23

You want to deploy a VPN Gateway to connect your on-premises network to GCP. You are using a non BGP-capable on-premises VPN device. You want to minimize downtime and operational overhead when your network grows. The device supports only IKEv2, and you want to follow Google-recommended practices.
What should you do?

A.Create a Cloud VPN instance.
Create a policy-based VPN tunnel per subnet.
Configure the appropriate local and remote traffic selectors to match your local and remote networks.
Create the appropriate static routes.

B.Create a Cloud VPN instance.
Create a policy-based VPN tunnel.
Configure the appropriate local and remote traffic selectors to match your local and remote networks.
Configure the appropriate static routes.

C.Create a Cloud VPN instance.
Create a route-based VPN tunnel.
Configure the appropriate local and remote traffic selectors to match your local and remote networks.
Configure the appropriate static routes.

D.Create a Cloud VPN instance.
Create a route-based VPN tunnel.
Configure the appropriate local and remote traffic selectors to 0.0.0.0/0.
Configure the appropriate static routes.

Professional-Cloud-Network-Engineer Exam Question 24

You have a storage bucket that contains the following objects:
- folder-a/image-a-1.jpg
- folder-a/image-a-2.jpg
- folder-b/image-b-1.jpg
- folder-b/image-b-2.jpg
Cloud CDN is enabled on the storage bucket, and all four objects have been successfully cached.
You want to remove the cached copies of all the objects with the prefix folder-a, using the minimum number of commands.
What should you do?

A.Make sure that all the objects with prefix folder-a are not shared publicly.

B.Issue a cache invalidation command with pattern /folder-a/*.

C.Disable Cloud CDN on the storage bucket. Wait 90 seconds. Re-enable Cloud CDN on the storage bucket.

D.Add an appropriate lifecycle rule on the storage bucket.

Professional-Cloud-Network-Engineer Exam Question 25

You have created a firewall with rules that only allow traffic over HTTP, HTTPS, and SSH ports. While testing, you specifically try to reach the server over multiple ports and protocols; however, you do not see any denied connections in the firewall logs. You want to resolve the issue.
What should you do?

A.Enable logging on the default Deny Any Firewall Rule.

B.Enable logging on the VM Instances that receive traffic.

C.Create a logging sink forwarding all firewall logs with no filters.

D.Create an explicit Deny Any rule and enable logging on the new rule.

Other Version: 348Google.Professional-Cloud-Network-Engineer.v2026-02-01.q106; 954Google.Professional-Cloud-Network-Engineer.v2024-12-11.q112; 847Google.Professional-Cloud-Network-Engineer.v2024-05-06.q121; 690Google.Professional-Cloud-Network-Engineer.v2024-02-05.q70; 1416Google.Professional-Cloud-Network-Engineer.v2022-09-17.q73; 2007Google.Professional-Cloud-Network-Engineer.v2022-05-31.q72; 124Google.Passexamdumps.Professional-Cloud-Network-Engineer.v2022-02-28.by.stanford.72q.pdf; 107Google.Examcollectionpass.Professional-Cloud-Network-Engineer.v2021-08-08.by.dempsey.84q.pdf

Latest Upload: 143CrowdStrike.CCSE-204.v2026-06-12.q25; 161VMware.2V0-17.25.v2026-06-12.q49; 150Appian.ACA-100.v2026-06-11.q23; 208CompTIA.220-1202.v2026-06-11.q114; 163CheckPoint.156-590.v2026-06-11.q47; 224CompTIA.220-1202.v2026-06-10.q109; 204CertiProf.CEHPC.v2026-06-10.q54; 152Hitachi.HQT-4160.v2026-06-10.q25; 402PMI.PMI-ACP-CN.v2026-06-09.q453; 192Splunk.SPLK-5002.v2026-06-08.q52

Professional-Cloud-Network-Engineer Exam Question 21

Professional-Cloud-Network-Engineer Exam Question 22

Professional-Cloud-Network-Engineer Exam Question 23

Professional-Cloud-Network-Engineer Exam Question 24

Professional-Cloud-Network-Engineer Exam Question 25

Download PDF File