Google PROFESSIONAL-CLOUD-NETWORK-ENGINEER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-NETWORK-ENGINEER Online Questions & Answers

• Question 181:

  You have an application running on Compute Engine that uses BigQuery to generate some results that are stored in Cloud Storage. You want to ensure that none of the application instances have external IP addresses.

  Which two methods can you use to accomplish this? (Choose two.)

  A. Enable Private Google Access on all the subnets.
  B. Enable Private Google Access on the VPC.
  C. Enable Private Services Access on the VPC.
  D. Create network peering between your VPC and BigQuery.
  E. Create a Cloud NAT, and route the application traffic via NAT gateway.
  A. Enable Private Google Access on all the subnets.
  E. Create a Cloud NAT, and route the application traffic via NAT gateway.

• Question 182:

  You are creating a new application and require access to Cloud SQL from VPC instances without public IP addresses.

  Which two actions should you take? (Choose two.)

  A. Activate the Service Networking API in your project.
  B. Activate the Cloud Datastore API in your project.
  C. Create a private connection to a service producer.
  D. Create a custom static route to allow the traffic to reach the Cloud SQL API.
  E. Enable Private Google Access.
  C. Create a private connection to a service producer.
  E. Enable Private Google Access.

• Question 183:

  You are establishing a hybrid connectivity solution between your on-premises data center and a Google Cloud VPC network using Cloud Interconnect. The connection must automatically adapt to network topology changes and provide high availability. You need to ensure that routes from your on-premises network are dynamically advertised to your Google Cloud VPC. You also need to ensure that routes from your Google Cloud VPC are dynamically advertised back to your on-premises routers.

  What should you do?

  A. Implement a policy-based route in your Google Cloud VPC network to forward all on-premises destined traffic to a Network Virtual Appliance (NVA).
  B. Use HA VPN on top of Interconnect to establish a BGP session to your on-premises router. Configure the Cloud Router to advertise all visible subnets.
  C. Deploy a Cloud Router in your Google Cloud VPC network configured to advertise all subnets visible to the Cloud Router. Establish a BGP session over your Cloud Interconnect VLAN attachment to your on-premises router.
  D. Use a Cloud Function triggered by network monitoring logs to automatically script and update static routes in the VPC route table for any detected on-premises subnets.
  C. Deploy a Cloud Router in your Google Cloud VPC network configured to advertise all subnets visible to the Cloud Router. Establish a BGP session over your Cloud Interconnect VLAN attachment to your on-premises router.

  ---

  Explanation

  Cloud Router with BGP over the Interconnect VLAN attachment provides dynamic route exchange in both directions. Advertising all subnets visible to the Cloud Router ensures VPC routes are propagated to on-premises, while the BGP session learned routes from on-premises are dynamically installed in the VPC, meeting the high availability and automatic topology adaptation requirements.

• Question 184:

  Your media organization hosts its main news site on Cloud Run. The site is served through a global external Application Load Balancer with Cloud CDN enabled to ensure fast page load times for a global audience. You recently pushed a critical correction to a major news story, but you have received reports that users are still seeing the original, incorrect version of the article. You have confirmed the updated content is live on the Cloud Run service. You need to ensure the corrected article is served to all users immediately with limited disruption.

  What should you do?

  A. Redeploy the Cloud Run service with a new revision.
  B. Update the Time to Live (TTL) for the backend service in the Cloud CDN configuration to 0.
  C. Disable and then re-enable Cloud CDN in the backend service configuration.
  D. Run the gcloud compute url-maps invalidate-cdn-cache command with the path to the updated article.
  D. Run the gcloud compute url-maps invalidate-cdn-cache command with the path to the updated article.

  ---

  Explanation

  Invalidating the specific cached object ensures Cloud CDN immediately removes the outdated version and forces a fresh fetch from the Cloud Run backend. This targets only the affected content, minimizing disruption and avoiding unnecessary changes to cache behavior or service configuration.

• Question 185:

  You are responsible for designing a new connectivity solution for your organization's enterprise network to access and use Google Workspace. You have an existing Shared VPC with Compute Engine instances in us-west1. Currently, you access Google Workspace via your service provider's internet access. You want to set up a direct connection between your network and Google.

  What should you do?

  A. Order a Dedicated Interconnect connection in the same metropolitan area. Create a VLAN attachment, a Cloud Router in us-west1, and a Border Gateway Protocol (BGP) session between your Cloud Router and your router.
  B. Order a Direct Peering connection in the same metropolitan area. Configure a Border Gateway Protocol (BGP) session between Google and your router.
  C. Configure HA VPN in us-west1. Configure a Border Gateway Protocol (BGP) session between your Cloud Router and your on-premises data center.
  D. Order a Carrier Peering connection in the same metropolitan area. Configure a Border Gateway Protocol (BGP) session between Google and your router.
  B. Order a Direct Peering connection in the same metropolitan area. Configure a Border Gateway Protocol (BGP) session between Google and your router.

• Question 186:

  You are setting up a Dedicated Interconnect connection from your organization's on-premises data center in Frankfurt, Germany, towards the europe-west3 region, which is also in the Frankfurt metropolitan area. The AI team lead expressed their concern regarding connectivity to the europe-west4 region because their team wants to use Google Cloud TPUs for their workloads. You need to ensure that low latency network connectivity is established for this team's workloads. You want to minimize costs and operational overhead.

  What should you do?

  A. Set up the Dedicated Interconnect connection towards the europe-west4 region instead of the europe-west3 region.
  B. Set up an additional Partner Interconnect connection between your data center and the europe-west4 region.
  C. Set up a remote VLAN attachment to the europe-west4 region on the Dedicated Interconnect connection.
  D. Use Cloud VPN instead of Dedicated Interconnect to send traffic over the internet.
  C. Set up a remote VLAN attachment to the europe-west4 region on the Dedicated Interconnect connection.

  ---

  Explanation

  A remote VLAN attachment lets you extend your existing Dedicated Interconnect circuit in europe-west3 into europe-west4 over Google's private backbone. This delivers the same low-latency, high-throughput connectivity to TPUs in europe- west4 without provisioning a second physical circuit (minimizing both costs and operational overhead).

• Question 187:

  Your company's logo is published as an image file across multiple websites that are hosted by your company. You have implemented Cloud CDN; however, you want to improve the performance of the cache hit ratio associated with this image file.

  What should you do?

  A. Configure custom cache keys for the backend service that holds the image file, and clear the Host and Protocol checkboxes.
  B. Configure the default time to live (TTL) as 0 for the image file.
  C. Configure versioned URLs for each domain to serve users the image file before the cache entry expires.
  D. Configure Cloud Storage as a custom origin backend to host the image file, and select multi-region as the location type.
  A. Configure custom cache keys for the backend service that holds the image file, and clear the Host and Protocol checkboxes.

• Question 188:

  You want to use Partner Interconnect to connect your on-premises network with your VPC. You already have an Interconnect partner.

  What should you first?

  A. Log in to your partner's portal and request the VLAN attachment there.
  B. Ask your Interconnect partner to provision a physical connection to Google.
  C. Create a Partner Interconnect type VLAN attachment in the GCP Console and retrieve the pairing key.
  D. Run gcloud compute interconnect attachments partner update <attachment> \ --region <region> --admin-enabled.
  C. Create a Partner Interconnect type VLAN attachment in the GCP Console and retrieve the pairing key.

• Question 189:

  Your organization is launching a new video game that will be available to all users globally through Cloud CDN. During the earl y release phase, you discovered that the wrong binary version was uploaded from Cloud Storage and cached in Cloud CDN. Thousands of users have downloaded the wrong version. Your marketing department has notified users that this was the wrong version of the game and asked all users to download the updated version using the same URL. You need to ensure users are downloading the updated version of the game.

  What should you do?

  A. Create a security policy to block all Cloud CON requests, review the logs, and filter which users are attempting to download the wrong game binary.
  B. Create a new URL path for the updated game binary. Allow the cache to expire automatically through HTTP headers.
  C. Upload the updated game binary to Cloud Storage. Invalidate the wrong game binary from the Cloud CDN cache.
  D. Disable Cloud CDN. Reconfigure the load balancer with the updated game binary. Enable Cloud CDN.
  C. Upload the updated game binary to Cloud Storage. Invalidate the wrong game binary from the Cloud CDN cache.

  ---

  Explanation

  Upload the updated binary: Replace the wrong game binary in Cloud Storage with the correct version. This ensures that the backend serving the content has the updated version. Invalidate the cached binary in Cloud CDN: Invalidating the cache for the URL forces Cloud CDN to fetch the updated version from the backend when users access the URL. This is the most efficient way to correct the issue without waiting for the cache to expire naturally, which could take significant time depending on the TTL settings.

• Question 190:

  You have deployed a new internal application that provides HTTP and TFTP services to on-premises hosts. You want to be able to distribute traffic across multiple Compute Engine instances, but need to ensure that clients are sticky to a particular instance across both services.

  Which session affinity should you choose?

  A. None
  B. Client IP
  C. Client IP and protocol
  D. Client IP, port and protocol
  B. Client IP