Practice Professional-Cloud-Network-Engineer Exam Online

Question 1

You create a Google Kubernetes Engine private cluster and want to use kubectl to get the status of the pods. In

one of your instances you notice the master is not responding, even though the cluster is up and running.

What should you do to solve the problem?

A : Assign a public IP address to the instance.

B : Create a route to reach the Master, pointing to the default internet gateway.

C : Create the appropriate firewall policy in the VPC to allow traffic from Master node IP address to the instance.

D : Create the appropriate master authorized network entries to allow the instance to communicate to the master.

Answer: D

Question 2

You have an application that is running in a managed instance group. Your development team has released an

updated instance template which contains a new feature which was not heavily tested. You want to minimize

impact to users if there is a bug in the new template.

How should you update your instances?

A : Manually patch some of the instances, and then perform a rolling restart on the instance group.

B :

Using the new instance template, perform a rolling update across all instances in the instance group. Verify the new feature once the rollout completes

C :

Deploy a new instance group and canary the updated template in that group. Verify the new feature in the new canary instance group, and then update the original instance group

D :

Perform a canary update by starting a rolling update and specifying a target size for your instances to receive the new template. Verify the new feature on the canary instances, and then roll forward to the rest of the instances.

Answer: D

Question 3

Your company has 10 separate Virtual Private Cloud (VPC) networks, with one VPC per project in a single region in Google Cloud. Your security team requires each VPC network to have private connectivity to the main on-premises location via a Partner Interconnect connection in the same region. To optimize cost and operations, the same connectivity must be shared with all projects. You must ensure that all traffic between different projects, on-premises locations, and the intemet can be inspected using the same third-party appliances. What should you do?

A : Configure the third-party appliances with multiple interfaces and specific Partner Interconnect VLAN attachments per project. Create the relevant routes on the third-party appliances and VPC networks.

B : Configure the third-party appliances with multiple interfaces, with each interface connected to a separate VPC network. Create separate VPC networks for on- premises and internet connectivity. Create the relevant routes on the third-party appliances and VPC networks.

C : Consolidate all existing projects' subnetworks into a single VPC. Create separate VPC networks for on-premises and intemet connectivity. Configure the third-party appliances with multiple interfaces, with each interface connected to a separate VPC network. Create the relevant routes on the third-party appliances and VPC networks.

D : Configure the third-party appliances with multiple interfaces. Create a hub VPC network for all projects, and create separate VPC networks for on-premises and internet connectivity. Create the relevant routes on the third-party appliances and VPC networks Use VPC Network Peering to connect all projects' VPC networks to the hub VPC. Export custom routes from the hub VPC and import on all projects' VPC networks.

Answer: B

Question 4

You recently noticed a recurring daily spike in network usage in your Google Cloud project. You need to identify the virtual machine NM) instances and type of traffic causing the spike in traffic utilization while minimizing the cost and management overhead required. What should you do?

A : Enable VPC Flow Logs and send the output to BigQuery for analysis

B : Enable Firewall Rules Logging for all allowed traffic and send the output to BigQuery for analysis

C : Configure Packet Mirroring to send all traffic to a VM. Use Wireshark on the VM to identity traffic utilization for each VM in the VPC.

D : Deploy a third-party network appliance and configure it as the default gateway. Use the third-party network appliance to identify users with high network traffic.

Answer: A

Question 5

Your company recently migrated to Google Cloud in a Single region. You configured separate Virtual Private

Cloud (VPC) networks for two departments. Department A and Department B. Department A has requested

access to resources that are part Of Department Bis VPC. You need to configure the traffic from private IP

addresses to flow between the VPCs using multi-NIC virtual machines (VMS) to meet security requirements

Your configuration also must

• Support both TCP and UDP protocols

• Provide fully automated failover

• Include health-checks

Require minimal manual Intervention In the client VMS

Which approach should you take?

A : Create the VMS In the same zone, and configure static routes With IP addresses as next hops.

B : Create the VMS in different zones, and configure static routes with instance names as next hops

C :

Create an Instance template and a managed instance group. Configure a Single internal load balancer, and define a custom static route with the Internal TCP/UDP load balancer as the next hop

D :

Create an instance template and a managed instance group. Configure two separate internal TCP/IJDP load balancers for each protocol (TCP!UDP), and configure the client VIVIS to use the internal load balancers' virtual IP addresses

Answer: D

Name:	Professional Cloud Network Engineer
Exam Code:	Professional-Cloud-Network-Engineer
Certification:	Google Cloud Certified
Vendor:	Google
Total Questions:	180
Last Updated:	Apr 23, 2024

Google Professional-Cloud-Network-Engineer