Online Access Free Professional-Cloud-Network-Engineer Practice Test

You have a web application that is currently hosted in the us-central1 region. Users experience high latency when traveling in Asia. You've configured a network load balancer, but users have not experienced a performance improvement. You want to decrease the latency.
What should you do?

• A.Configure Dynamic Routing for the subnet hosting the application.
• B.Configure an HTTP load balancer, and direct the traffic to it.
• C.Configure the TTL for the DNS zone to decrease the time between updates.
• D.Configure a policy-based route rule to prioritize the traffic.

Your software team is developing an on-premises web application that requires direct connectivity to Compute Engine Instances in GCP using the RFC 1918 address space. You want to choose a connectivity solution from your on-premises environment to GCP, given these specifications:
* Your ISP is a Google Partner Interconnect provider.
* Your on-premises VPN device's internet uplink and downlink speeds are 10 Gbps.
* A test VPN connection between your on-premises gateway and GCP is performing at a maximum speed of 500 Mbps due to packet losses.
* Most of the data transfer will be from GCP to the on-premises environment.
* The application can burst up to 1.5 Gbps during peak transfers over the Interconnect.
* Cost and the complexity of the solution should be minimal.
How should you provision the connectivity solution?

• A.Use network compression over your VPN to increase the amount of data you can send over your VPN.
• B.Create multiple VPN tunnels to account for the packet losses, and increase bandwidth using ECMP.
• C.Provision a Dedicated Interconnect instead of a VPN.
• D.Provision a Partner Interconnect through your ISP.

You configured Cloud VPN with dynamic routing via Border Gateway Protocol (BGP). You added a custom route to advertise a network that is reachable over the VPN tunnel. However, the on-premises clients still cannot reach the network over the VPN tunnel. You need to examine the logs in Cloud Logging to confirm that the appropriate routers are being advertised over the VPN tunnel. Which filter should you use in Cloud Logging to examine the logs?

• A.resource.type= "gce_network_region"
• B.resource.type= "vpn_gateway"
• C.resource.type= "vpn_tunnel"
• D.resource.type= "gce_router"

Question:
You are troubleshooting connectivity issues between Google Cloud and a public SaaS provider. Connectivity between the two environments is through the public internet. Your users are reporting intermittent connection errors when using TCP to connect; however, ICMP tests show no failures. According to users, errors occur around the same time every day. You want to troubleshoot and gather information by using Google Cloud tools that are most likely to provide insights into what is occurring within Google Cloud. What should you do?

• A.Enable and review Cloud Logging on your Cloud NAT gateway. Look for logs with errors matching the destination IP address of the public SaaS provider.
• B.Enable and review Cloud Logging for Cloud Armor. Look for logs with errors matching the destination IP address of the public SaaS provider.
• C.Enable the Firewall insights API. Set the deny rule insights observation period to one day. Review the insights to assure there are no firewall rules denying traffic.
• D.Create a Connectivity Test by using TCP, the source IP address of your test VM, and the destination IP address of the public SaaS provider. Review the live data plane analysis and take the next steps based on the test results.

You recently deployed two network virtual appliances in us-central1. Your network appliances provide connectivity to your on-premises network, 10.0.0.0/8. You need to configure the routing for your Virtual Private Cloud (VPC). Your design must meet the following requirements:
All access to your on-premises network must go through the network virtual appliances.
Allow on-premises access in the event of a single network virtual appliance failure.
Both network virtual appliances must be used simultaneously.
Which method should you use to accomplish this?

• A.Configure an internal HTTP(S) load balancer with the two network virtual appliances as backends.
  Configure a route for 10.0.0.0/8 with the internal HTTP(S) load balancer as the next hop.
• B.Configure an internal TCP/UDP load balancer with the two network virtual appliances as backends.Configure a route for 10.0.0.0/8 with the internal load balancer as the next hop.
• C.Configure two routes for 10.0.0.0/8 with different priorities, each pointing to separate network virtual appliances.
• D.Configure a network load balancer for the two network virtual appliances. Configure a route for 10.0.0.0
  /8 with the network load balancer as the next hop.