Professional-Cloud-Network-Engineer Dumps 2024 - New Google Professional-Cloud-Network-Engineer Exam Questions
Free Professional-Cloud-Network-Engineer braindumps download (Professional-Cloud-Network-Engineer exam dumps Free Updated)
Google Professional-Cloud-Network-Engineer certification is beneficial for networking professionals who want to advance their careers in cloud networking. Google Cloud Certified - Professional Cloud Network Engineer certification demonstrates the candidate's expertise in designing and implementing network solutions in the cloud and validates their ability to work with Google Cloud Platform's networking services. Google Cloud Certified - Professional Cloud Network Engineer certification can also help professionals to differentiate themselves in a competitive job market and increase their earning potential.
Holding a Professional-Cloud-Network-Engineer certification can lead to many career opportunities, including job roles such as Cloud Network Engineer, Cloud Network Architect, and Cloud Network Manager. It can also help professionals advance their careers by demonstrating their expertise in networking in the cloud, which is becoming increasingly critical as more companies move their operations to the cloud.
NEW QUESTION # 13
After a network change window one of your company's applications stops working. The application uses an on-premises database server that no longer receives any traffic from the application. The database server IP address is 10.2.1.25. You examine the change request, and the only change is that 3 additional VPC subnets were created. The new VPC subnets created are 10.1.0.0/16, 10.2.0.0/16, and 10.3.1.0/24/ The on-premises router is advertising 10.0.0.0/8.
What is the most likely cause of this problem?
- A. A cloud firewall rule that blocks traffic to the on-premises database server was created during the change.
- B. The on-premises router is not advertising a route for the database server.
- C. The less specific VPC subnet route is taking priority.
- D. The more specific VPC subnet route is taking priority.
Answer: D
NEW QUESTION # 14
Your company has recently expanded their EMEA-based operations into APAC. Globally distributed users report that their SMTP and IMAP services are slow. Your company requires end-to-end encryption, but you do not have access to the SSL certificates.
Which Google Cloud load balancer should you use?
- A. Network load balancer
- B. SSL proxy load balancer
- C. HTTPS load balancer
- D. TCP proxy load balancer
Answer: B
Explanation:
Explanation/Reference: https://cloud.google.com/security/encryption-in-transit/
NEW QUESTION # 15
You work for a multinational enterprise that is moving to GCP.
These are the cloud requirements:
- An on-premises data center located in the United States in Oregon and New York with Dedicated Interconnects connected to Cloud regions us- west1 (primary HQ) and us-east4 (backup)
- Multiple regional offices in Europe and APAC
- Regional data processing is required in europe-west1 and australia-
southeast1
- Centralized Network Administration Team
Your security and compliance team requires a virtual inline security appliance to perform L7 inspection for URL filtering. You want to deploy the appliance in us-west1.
What should you do?
- A. Create 1 VPC in a Shared VPC Host Project.
Configure a 2-NIC instance in zone us-west1-a in the Host Project.
Attach NIC0 in us-west1 subnet of the Host Project.
Attach NIC1 in us-west1 subnet of the Host Project
Deploy the instance.
Configure the necessary routes and firewall rules to pass traffic through the instance. - B. Create 2 VPCs in a Shared VPC Host Project.
Configure a 2-NIC instance in zone us-west1-a in the Host Project.
Attach NIC0 in VPC #1 us-west1 subnet of the Host Project.
Attach NIC1 in VPC #2 us-west1 subnet of the Host Project.
Deploy the instance.
Configure the necessary routes and firewall rules to pass traffic through the instance. - C. Create 1 VPC in a Shared VPC Service Project.
Configure a 2-NIC instance in zone us-west1-a in the Service Project.
Attach NIC0 in us-west1 subnet of the Service Project.
Attach NIC1 in us-west1 subnet of the Service Project ?Deploy the instance.
Configure the necessary routes and firewall rules to pass traffic through the instance. - D. Create 2 VPCs in a Shared VPC Host Project.
Configure a 2-NIC instance in zone us-west1-a in the Service Project.
Attach NIC0 in VPC #1 us-west1 subnet of the Host Project.
Attach NIC1 in VPC #2 us-west1 subnet of the Host Project.
Deploy the instance.
Configure the necessary routes and firewall rules to pass traffic through the instance.
Answer: B
NEW QUESTION # 16
You recently deployed two network virtual appliances in us-central1. Your network appliances provide connectivity to your on-premises network, 10.0.0.0/8. You need to configure the routing for your Virtual Private Cloud (VPC). Your design must meet the following requirements:
All access to your on-premises network must go through the network virtual appliances.
Allow on-premises access in the event of a single network virtual appliance failure.
Both network virtual appliances must be used simultaneously.
Which method should you use to accomplish this?
- A. Configure a network load balancer for the two network virtual appliances. Configure a route for 10.0.0.0/8 with the network load balancer as the next hop.
- B. Configure an internal HTTP(S) load balancer with the two network virtual appliances as backends. Configure a route for 10.0.0.0/8 with the internal HTTP(S) load balancer as the next hop.
- C. Configure an internal TCP/UDP load balancer with the two network virtual appliances as backends. Configure a route for 10.0.0.0/8 with the internal load balancer as the next hop.
- D. Configure two routes for 10.0.0.0/8 with different priorities, each pointing to separate network virtual appliances.
Answer: B
NEW QUESTION # 17
The security team has disabled external SSH access into production virtual machines in GCP.
The operations team needs to remotely manage the VMs and other resources. What can they do?
- A. Grant the operations team access to use Google Cloud Shell.
- B. Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.
- C. Configure a VPN connection to GCP to allow SSH access to the cloud VMs.
- D. Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.
Answer: A
Explanation:
Grant the operations team access to use Google Cloud Shell.
B (Correct Answer) - Grant the operations engineers access to use Google Cloud Shell.
All the engineer asked is remote access the VMs just like using SSH, so if the machines still have an external IP address, the engineers can access them via SSH using Google Cloud Shell.
This is easies effective way to meet the requirements. All other answers are possible options that might require more setup than worthwhile for your needs.
NEW QUESTION # 18
Your company is working with a partner to provide a solution for a customer. Both your company and the partner organization are using GCP. There are applications in the partner's network that need access to some resources in your company's VPC. There is no CIDR overlap between the VPCs.
Which two solutions can you implement to achieve the desired results without compromising the security? (Choose two.)
- A. Cloud NAT
- B. Cloud VPN
- C. Dedicated Interconnect
- D. VPC peering
- E. Shared VPC
Answer: B,C
NEW QUESTION # 19
You have an HA VPN connection with two tunnels running in active/passive mode between your Virtual Private Cloud (VPC) and on-premises network. Traffic over the connection has recently increased from 1 gigabit per second (Gbps) to 4 Gbps, and you notice that packets are being dropped. You need to configure your VPN connection to Google Cloud to support 4 Gbps. What should you do?
- A. Configure the remote autonomous system number (ASN) to 4096.
- B. Configure a second Cloud Router to scale bandwidth in and out of the VPC.
- C. Configure the maximum transmission unit (MTU) to its highest supported value.
- D. Configure a second set of active/passive VPN tunnels.
Answer: D
NEW QUESTION # 20
You have ordered Dedicated Interconnect in the GCP Console and need to give the Letter of Authorization/Connecting Facility Assignment (LOA-CFA) to your cross-connect provider to complete the physical connection.
Which two actions can accomplish this? (Choose two.)
- A. Run gcloud compute interconnects describe <interconnect>.
- B. Download the LOA-CFA from the Hybrid Connectivity section of the GCP Console.
- C. Check the email for the account of the NOC contact that you specified during the ordering process.
- D. Contact your cross-connect provider and inform them that Google automatically sent the LOA/CFA to them via email, and to complete the connection.
- E. Open a Cloud Support ticket under the Cloud Interconnect category.
Answer: B,C
NEW QUESTION # 21
You need to configure a static route to an on-premises resource behind a Cloud VPN gateway that is configured for policy-based routing using the gcloud command.
Which next hop should you choose?
- A. The name and region of the Cloud VPN tunnel
- B. The IP address of the Cloud VPN gateway
- C. The default internet gateway
- D. The IP address of the instance on the remote side of the VPN tunnel
Answer: A
Explanation:
When you create a route based tunnel using the Cloud Console, Classic VPN performs both of the following tasks: Sets the tunnel's local and remote traffic selectors to any IP address (0.0.0.0/0) For each range in Remote network IP ranges, Google Cloud creates a custom static route whose destination (prefix) is the range's CIDR, and whose next hop is the tunnel. https://cloud.google.com/network-connectivity/docs/vpn/how-to/creating-static-vpns
NEW QUESTION # 22
You created a VPC network named Retail in auto mode. You want to create a VPC network named Distribution and peer it with the Retail VPC.
How should you configure the Distribution VPC?
- A. Create the Distribution VPC in custom mode. Use the CIDR range 10.0.0.0/9. Create the necessary subnets, and then peer them via network peering.
- B. Create the Distribution VPC in custom mode. Use the CIDR range 10.128.0.0/9. Create the necessary subnets, and then peer them via network peering.
- C. Rename the default VPC as "Distribution" and peer it via network peering.
- D. Create the Distribution VPC in auto mode. Peer both the VPCs via network peering.
Answer: A
NEW QUESTION # 23
Your company is working with a partner to provide a solution for a customer. Both your company and the partner organization are using GCP. There are applications in the partner's network that need access to some resources in your company's VPC. There is no CIDR overlap between the VPCs.
Which two solutions can you implement to achieve the desired results without compromising the security? (Choose two.)
- A. Cloud NAT
- B. Cloud VPN
- C. Dedicated Interconnect
- D. VPC peering
- E. Shared VPC
Answer: B,C
Explanation:
https://cloud.google.com/vpc/docs/vpc
NEW QUESTION # 24
Your company has a security team that manages firewalls and SSL certificates. It also has a networking team that manages the networking resources. The networking team needs to be able to read firewall rules, but should not be able to create, modify, or delete them.
How should you set up permissions for the networking team?
- A. Assign members of the networking team the compute.networkViewer role, and add the compute.networks.use permission.
- B. Assign members of the networking team the compute.networkUser role.
- C. Assign members of the networking team a custom role with only the compute.networks.* and the compute.firewalls.list permissions.
- D. Assign members of the networking team the compute.networkAdmin role.
Answer: D
Explanation:
https://cloud.google.com/compute/docs/access/iam
NEW QUESTION # 25
You are using a 10-Gbps direct peering connection to Google together with the gsutil tool to upload files to Cloud Storage buckets from on-premises servers. The on-premises servers are 100 milliseconds away from the Google peering point. You notice that your uploads are not using the full 10-Gbps bandwidth available to you. You want to optimize the bandwidth utilization of the connection.
What should you do on your on-premises servers?
- A. Use the perfdiag parameter in your gsutil command to enable faster performance: gsutil perfdiag gs://[BUCKET NAME].
- B. Remove the -m flag from the gsutil command to enable single-threaded transfers.
- C. Compress files using utilities like tar to reduce the size of data being sent.
- D. Tune TCP parameters on the on-premises servers.
Answer: A
NEW QUESTION # 26
Your company has a single Virtual Private Cloud (VPC) network deployed in Google Cloud with access from on-premises locations using Cloud Interconnect connections. Your company must be able to send traffic to Cloud Storage only through the Interconnect links while accessing other Google APIs and services over the public internet. What should you do?
- A. Use Private Google Access, with private.googleapis.com virtual IP addresses for Cloud Storage and restricted.googleapis.com virtual IP addresses for all other Google APIs and services.
- B. Use the default public domains for all Google APIs and services.
- C. Use Private Service Connect to access Cloud Storage, and use the default public domains for all other Google APIs and services.
- D. Use Private Google Access, with restricted.googleapis.com virtual IP addresses for Cloud Storage and private.googleapis.com for all other Google APIs and services.
Answer: C
NEW QUESTION # 27
You created a VPC network named Retail in auto mode. You want to create a VPC network named Distribution and peer it with the Retail VPC.
How should you configure the Distribution VPC?
- A. Create the Distribution VPC in custom mode.
Use the CIDR range 10.128.0.0/9.
Create the necessary subnets, and then peer them via network peering. - B. Rename the default VPC as "Distribution" and peer it via network peering.
- C. Create the Distribution VPC in auto mode.
Peer both the VPCs via network peering. - D. Create the Distribution VPC in custom mode.
Use the CIDR range 10.0.0.0/9. Create the necessary subnets, and then peer them via network peering.
Answer: D
Explanation:
https://cloud.google.com/vpc/docs/using-vpc
NEW QUESTION # 28
Your organization is deploying a single project for 3 separate departments. Two of these departments require network connectivity between each other, but the third department should remain in isolation. Your design should create separate network administrative domains between these departments. You want to minimize operational overhead.
How should you design the topology?
- A. Create 3 separate VPCs, and use VPC peering to establish connectivity between the two appropriate VPCs.
- B. Create 3 separate VPCs, and use Cloud VPN to establish connectivity between the two appropriate VPCs.
- C. Create a Shared VPC Host Project and the respective Service Projects for each of the 3 separate departments.
- D. Create a single project, and deploy specific firewall rules. Use network tags to isolate access between the departments.
Answer: A
Explanation:
https://cloud.google.com/vpc/docs/vpc-peering
NEW QUESTION # 29
You are responsible for designing a new connectivity solution between your organization's on-premises data center and your Google Cloud Virtual Private Cloud (VPC) network Currently, there Is no end-to-end connectivity. You must ensure a service level agreement (SLA) of 99.99% availability What should you do?
- A. Use a Direct Peering connection between your on-premises data center and Google Cloud. Configure Classic VPN with two tunnels and one Cloud Router.
- B. Use one Dedicated Interconnect connection in a single metropolitan area. Configure one Cloud Router and enable global routing in the VPC.
- C. Use two Dedicated Interconnect connections in a single metropolitan area. Configure one Cloud Router and enable global routing in the VPC.
- D. Use HA VPN. Configure one tunnel from each Interface of the VPN gateway to connect to the corresponding interfaces on the peer gateway on-premises. Configure one Cloud Router and enable global routing in the VPC.
Answer: A
NEW QUESTION # 30
You have a web application that is currently hosted in the us-central1 region. Users experience high latency when traveling in Asia. You've configured a network load balancer, but users have not experienced a performance improvement. You want to decrease the latency.
What should you do?
- A. Configure an HTTP load balancer, and direct the traffic to it.
- B. Configure the TTL for the DNS zone to decrease the time between updates.
- C. Configure Dynamic Routing for the subnet hosting the application.
- D. Configure a policy-based route rule to prioritize the traffic.
Answer: A
Explanation:
Explanation/Reference: https://cloud.google.com/load-balancing/docs/tutorials/optimize-app-latency
NEW QUESTION # 31
You create multiple Compute Engine virtual machine instances to be used at TFTP servers.
Which type of load balancer should you use?
- A. Network load balancer
- B. SSL proxy load balancer
- C. TCP proxy load balancer
- D. HTTP(S) load balancer
Answer: B
NEW QUESTION # 32
......
Verified Professional-Cloud-Network-Engineer dumps Q&As - Pass Guarantee Exam Dumps Test Engine: https://quiztorrent.testbraindump.com/Professional-Cloud-Network-Engineer-exam-prep.html
