Google PROFESSIONAL-CLOUD-NETWORK-ENGINEER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-NETWORK-ENGINEER Online Questions & Answers

• Question 331:

  You are using a 10-Gbps direct peering connection to Google together with the gsutil tool to upload files to Cloud Storage buckets from on-premises servers. The on-premises servers are 100 milliseconds away from the Google peering point.

  You notice that your uploads are not using the full 10-Gbps bandwidth available to you. You want to optimize the bandwidth utilization of the connection.

  What should you do on your on-premises servers?

  A. Tune TCP parameters on the on-premises servers.
  B. Compress files using utilities like tar to reduce the size of data being sent.
  C. Remove the -m flag from the gsutil command to enable single-threaded transfers.
  D. Use the perfdiag parameter in your gsutil command to enable faster performance: gsutil perfdiag gs://[BUCKET_NAME].
  A. Tune TCP parameters on the on-premises servers.

• Question 332:

  You work for a multinational enterprise that is moving to GCP.

  These are the cloud requirements:

  - An on-premises data center located in the United States in Oregon and New York with Dedicated Interconnects connected to Cloud regions us-west1 (primary HQ) and us-east4 (backup)

  - Multiple regional offices in Europe and APAC.

  - Regional data processing is required in europe-west1 and australia-southeast1.

  - Centralized Network Administration Team.

  Your security and compliance team requires a virtual inline security appliance to perform L7 inspection for URL filtering. You want to deploy the appliance in us-west1.

  What should you do?

  A. - Create 2 VPCs in a Shared VPC Host Project. - Configure a 2-NIC instance in zone us-west1-a in the Host Project. - Attach NIC0 in VPC #1 us-west1 subnet of the Host Project. - Attach NIC1 in VPC #2 us-west1 subnet of the Host Project. - Deploy the instance. - Configure the necessary routes and firewall rules to pass traffic through the instance.
  B. - Create 2 VPCs in a Shared VPC Host Project. - Configure a 2-NIC instance in zone us-west1-a in the Service Project. - Attach NIC0 in VPC #1 us-west1 subnet of the Host Project. - Attach NIC1 in VPC #2 us-west1 subnet of the Host Project. - Deploy the instance. - Configure the necessary routes and firewall rules to pass traffic through the instance.
  C. - Create 1 VPC in a Shared VPC Host Project. - Configure a 2-NIC instance in zone us-west1-a in the Host Project. - Attach NIC0 in us-west1 subnet of the Host Project. - Attach NIC1 in us-west1 subnet of the Host Project - Deploy the instance. - Configure the necessary routes and firewall rules to pass traffic through the instance.
  D. - Create 1 VPC in a Shared VPC Service Project. - Configure a 2-NIC instance in zone us-west1-a in the Service Project. - Attach NIC0 in us-west1 subnet of the Service Project. - Attach NIC1 in us-west1 subnet of the Service Project - Deploy the instance. - Configure the necessary routes and firewall rules to pass traffic through the instance.
  B. - Create 2 VPCs in a Shared VPC Host Project. - Configure a 2-NIC instance in zone us-west1-a in the Service Project. - Attach NIC0 in VPC #1 us-west1 subnet of the Host Project. - Attach NIC1 in VPC #2 us-west1 subnet of the Host Project. - Deploy the instance. - Configure the necessary routes and firewall rules to pass traffic through the instance.

• Question 333:

  Your company's security team wants to limit the type of inbound traffic that can reach your web servers to protect against security threats. You need to configure the firewall rules on the web servers within your Virtual Private Cloud (VPC) to handle HTTP and HTTPS web traffic for TCP only.

  What should you do?

  A. Create an allow on match ingress firewall rule with the target tag "web-server" to allow all IP addresses for TCP port 80.
  B. Create an allow on match egress firewall rule with the target tag "web-server" to allow all IP addresses for TCP port 80.
  C. Create an allow on match ingress firewall rule with the target tag "web-server" to allow all IP addresses for TCP ports 80 and 443.
  D. Create an allow on match egress firewall rule with the target tag "web-server" to allow web server IP addresses for TCP ports 80 and 443.
  C. Create an allow on match ingress firewall rule with the target tag "web-server" to allow all IP addresses for TCP ports 80 and 443.

  ---

  Explanation

  References:

  https://cloud.google.com/load-balancing/docs/https