Online Access Free Professional-Cloud-Network-Engineer Practice Test

Your company just completed the acquisition of Altostrat (a current GCP customer). Each company has a separate organization in GCP and has implemented a custom DNS solution. Each organization will retain its current domain and host names until after a full transition and architectural review is done in one year. These are the assumptions for both GCP environments.
* Each organization has enabled full connectivity between all of its projects by using Shared VPC.
* Both organizations strictly use the 10.0.0.0/8 address space for their instances, except for bastion hosts (for accessing the instances) and load balancers for serving web traffic.
* There are no prefix overlaps between the two organizations.
* Both organizations already have firewall rules that allow all inbound and outbound traffic from the 10.0.0.0
/8 address space.
* Neither organization has Interconnects to their on-premises environment.
You want to integrate networking and DNS infrastructure of both organizations as quickly as possible and with minimal downtime.
Which two steps should you take? (Choose two.)

• A.Connect VPCs in both organizations using Cloud VPN together with Cloud Router.
• B.Provision Cloud Interconnect to connect both organizations together.
• C.Set up some variant of DNS forwarding and zone transfers in each organization.
• D.Use Cloud DNS to create A records of all VMs and resources across all projects in both organizations.
• E.Create a third organization with a new host project, and attach all projects from your company and Altostrat to it using shared VPC.

You are creating an instance group and need to create a new health check for HTTP(s) load balancing.
Which two methods can you use to accomplish this? (Choose two.)

• A.Create a new health check using the VPC Network section in the GCP Console.
• B.Create a new health check, or select an existing one, when you complete the load balancer's backend configuration in the GCP Console.
• C.Create a new legacy health check using the gcloud command line tool.
• D.Create a new legacy health check using the Health checks section in the GCP Console.
• E.Create a new health check using the gcloud command line tool.

You want to create a service in GCP using IPv6.
What should you do?

• A.Configure an internal load balancer with the designated IPv6 address.
• B.Configure a global load balancer with the designated IPv6 address.
• C.Create the instance with the designated IPv6 address.
• D.Configure a TCP Proxy with the designated IPv6 address.

You recently configured Google Cloud Armor security policies to manage traffic to your application. You discover that Google Cloud Armor is incorrectly blocking some traffic to your application. You need to identity the web application firewall (WAF) rule that is incorrectly blocking traffic. What should you do?

• A.Enable firewall logs, and view the logs in Firewall Insights.
• B.Enable VPC Flow Logs, and view the logs in Cloud Logging.
• C.Enable Google Cloud Armor audit logs, and view the logs on the Activity page in the Google Cloud Console.
• D.Enable HTTP(S) Load Balancing logging with sampling rate equal to 1, and view the logs in Cloud Logging.

You are designing a new application that has backends internally exposed on port 800. The application will be exposed externally using both IPv4 and IPv6 via TCP on port 700. You want to ensure high availability for this application. What should you do?

• A.Create a network load balancer that used backend services containing one instance group with two instances.
• B.Create a network load balancer that uses a target pool backend with two instances.
• C.Create a TCP proxy that uses backend services containing an instance group with two instances.
• D.Create a TCP proxy that uses a zonal network endpoint group containing one instance.