You created a new VPC network named Dev with a single subnet. You added a firewall rule for the network Dev to allow HTTP traffic only and enabled logging.
When you try to log in to an instance in the subnet via Remote Desktop Protocol, the login fails. You look for the Firewall rules logs in Stackdriver Logging, but you do not see any entries for blocked traffic. You want to see the logs for blocked traffic.
What should you do?
A. Check the VPC flow logs for the instance.You manage a highly dynamic e-commerce website that uses Cloud CDN to improve content delivery speed for its global customer base. A new product launched on the website with updated images and pricing information, and these changes were pushed to your Cloud Storage and Compute Engine instances behind a load balancer. However, customers are still seeing the old product images and pricing on the website. You need to immediately and efficiently push the new content to users.
What should you do?
A. Temporarily disable and then re-enable Cloud CDN on the backend services to force a cache reload.You are designing a shared VPC architecture. Your network and security team has strict controls over which routes are exposed between departments. Your Production and Staging departments can communicate with each other, but only via specific networks. You want to follow Google-recommended practices.
How should you design this topology?
A. Create 2 shared VPCs within the shared VPC Host Project, and enable VPC peering between them. Use firewall rules to filter access between the specific networks.Your company is planning a migration to Google Kubernetes Engine. Your application team informed you that they require a minimum of 60 Pods per node and a maximum of 100 Pods per node.
Which Pod per node CIDR range should you use?
A. /24Your company is deploying a public web application that must use path-based routing, integrate with Cloud Armor, and serve users from multiple continents with a single anycast frontend IP address.
Which load balancer should you use?
A. Global external Application Load Balancer.You recently configured Google Cloud Armor security policies to manage traffic to your application. You discover that Google Cloud Armor is incorrectly blocking some traffic to your application. You need to identity the web application firewall (WAF) rule that is incorrectly blocking traffic.
What should you do?
A. Enable firewall logs, and view the logs in Firewall Insights.Your enterprise has ten VPC networks that need controlled connectivity through a central hub. The network team wants to avoid managing a full mesh of VPC Network Peering connections and wants a topology that can add new spokes with minimal operational overhead.
Which Google Cloud service should you use?
A. Network Connectivity Center with a hub and VPC spokes.Your company utilizes Network Connectivity Center (NCC) to facilitate communication between numerous spoke VPCs. A development team reports that their application instances in app-dev-spoke-vpc are unable to connect to a new database service located in db-dev-spoke-vpc. You need to diagnose this issue using an observability tool and determine the root cause.
What should you do?
A. Use Firewall Insights to analyze the firewall rule configuration and modify the appropriate rule.Your company's current network deployment is composed of a single VPC that is connected to a single data center by a Dedicated Interconnect connection. The Dedicated Interconnect topology has a 99.9% SLA. There is a single VLAN attachment for each of the two Dedicated Interconnect links. All VLAN attachments only use IPv4 addresses. Between the data center and the VPC, only IPv4 routes are exchanged by BGP. You need to create a solution to exchange IPV6
routes between the data center and the VPC. You must use a procedure that requires the least amount of setup effort and minimizes costs. It's impossible to add new BGP peers to the configuration of the on-premises routers. Only modifications of the existing BGP peers are possible.
What should you do?
A. Modify the stack type of the existing VLAN attachments from IPv4 only to dual stack. Add a pair of new IPv6-only interfaces to the cloud router. Add the new IPv6 BGP peers to the cloud router corresponding to on-premises routers.Your organization is developing a landing zone architecture with the following requirements: There should be no communication possible between production and non-production environments. Communication between applications within an environment may be necessary. Network administrators should centrally manage all network resources, including subnets, routes, and firewall rules. Each application should be billed separately. Developers of an application within a project should have the autonomy to create their compute resources. They should not create or modify networking resources. Up to 1000 applications are expected per environment.
You need to create a design that accommodates these requirements.
What should you do?
A. Create a design that has one Shared VPC host project for the production environment, and another Shared VPC host project for the nonproduction environment. Associate the various applications' service projects with the corresponding environment's host project.Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Google exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your PROFESSIONAL-CLOUD-NETWORK-ENGINEER exam preparations and Google certification application, do not hesitate to visit our Vcedump.com to find your solutions here.