Professional-Cloud-Network-Engineer Exam Question 46

You need to create a GKE cluster in an existing VPC that is accessible from on-premises. You must meet the following requirements:
IP ranges for pods and services must be as small as possible.
The nodes and the master must not be reachable from the internet.
You must be able to use kubectl commands from on-premises subnets to manage the cluster.
How should you create the GKE cluster?
  • Professional-Cloud-Network-Engineer Exam Question 47

    After a network change window one of your company's applications stops working. The application uses an on-premises database server that no longer receives any traffic from the application. The database server IP address is 10.2.1.25. You examine the change request, and the only change is that 3 additional VPC subnets were created. The new VPC subnets created are 10.1.0.0/16, 10.2.0.0/16, and 10.3.1.0/24/ The on-premises router is advertising 10.0.0.0/8.
    What is the most likely cause of this problem?
  • Professional-Cloud-Network-Engineer Exam Question 48

    Your organization has Compute Engine instances in us-east1, us-west2, and us-central1. Your organization also has an existing Cloud Interconnect physical connection in the East Coast of the United States with a single VLAN attachment and Cloud Router in us-east1. You need to provide a design with high availability and ensure that if a region goes down, you still have access to all your other Virtual Private Cloud (VPC) subnets. You need to accomplish this in the most cost-effective manner possible. What should you do?
  • Professional-Cloud-Network-Engineer Exam Question 49

    You have recently been put in charge of managing identity and access management for your organization. You have several projects and want to use scripting and automation wherever possible. You want to grant the editor role to a project member.
    Which two methods can you use to accomplish this? (Choose two.)
  • Professional-Cloud-Network-Engineer Exam Question 50

    You are creating a new application and require access to Cloud SQL from VPC instances without public IP addresses.
    Which two actions should you take? (Choose two.)