Free Access Google.Professional-Cloud-Network-Engineer.v2023-01-24.q52 Practice Test (Page 3)

Question 6

You have an HA VPN connection with two tunnels running in active/passive mode between your Virtual Private Cloud (VPC) and on-premises network. Traffic over the connection has recently increased from 1 gigabit per second (Gbps) to 4 Gbps, and you notice that packets are being dropped. You need to configure your VPN connection to Google Cloud to support 4 Gbps. What should you do?

A.Configure a second Cloud Router to scale bandwidth in and out of the VPC.

B.Configure the remote autonomous system number (ASN) to 4096.

C.Configure a second set of active/passive VPN tunnels.

D.Configure the maximum transmission unit (MTU) to its highest supported value.

Question 7

You have a storage bucket that contains two objects. Cloud CDN is enabled on the bucket, and both objects have been successfully cached. Now you want to make sure that one of the two objects will not be cached anymore, and will always be served to the internet directly from the origin.
What should you do?

A.Ensure that the object you don't want to be cached anymore is not shared publicly.

B.Create a new storage bucket, and move the object you don't want to be checked anymore inside it. Then edit the bucket setting and enable the private attribute.

C.Add an appropriate lifecycle rule on the storage bucket containing the two objects.

D.Add a Cache-Control entry with value private to the metadata of the object you don't want to be cached anymore. Invalidate all the previously cached copies.

Question 8

You want to deploy a VPN Gateway to connect your on-premises network to GCP. You are using a non BGP-capable on-premises VPN device. You want to minimize downtime and operational overhead when your network grows. The device supports only IKEv2, and you want to follow Google-recommended practices.
What should you do?

A.* Create a Cloud VPN instance.* Create a policy-based VPN tunnel per subnet.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Create the appropriate static routes.

B.* Create a Cloud VPN instance.* Create a policy-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Configure the appropriate static routes.

C.* Create a Cloud VPN instance.* Create a route-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Configure the appropriate static routes.

D.* Create a Cloud VPN instance.* Create a route-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to 0.0.0.0/0.* Configure the appropriate static routes.

Question 9

You are migrating a three-tier application architecture from on-premises to Google Cloud. As a first step in the migration, you want to create a new Virtual Private Cloud (VPC) with an external HTTP(S) load balancer. This load balancer will forward traffic back to the on-premises compute resources that run the presentation tier. You need to stop malicious traffic from entering your VPC and consuming resources at the edge, so you must configure this policy to filter IP addresses and stop cross-site scripting (XSS) attacks. What should you do?

A.Create a VPC firewall ruleset, and apply it to all instances in unmanaged instance groups.

B.Create a hierarchical firewall ruleset, and apply it to the VPC's parent organization resource node.

C.Create a Google Cloud Armor policy, and apply it to a backend service that uses an internet network endpoint group (NEG) backend.

D.Create a Google Cloud Armor policy, and apply it to a backend service that uses an unmanaged instance group backend.

Question 10

You need to enable Private Google Access for use by some subnets within your Virtual Private Cloud (VPC). Your security team set up the VPC to send all internet-bound traffic back to the on- premises data center for inspection before egressing to the internet, and is also implementing VPC Service Controls in the environment for API-level security control. You have already enabled the subnets for Private Google Access. What configuration changes should you make to enable Private Google Access while adhering to your security team's requirements?

A.Create a private DNS zone with a CNAME record for *.googleapis.com to restricted.googleapis.com, with an A record pointing to Google's restricted API address range.
Change the custom route that points the default route (0/0) to the default internet gateway as the next hop.

B.Create a private DNS zone with a CNAME record for *.googleapis.com to private.googleapis.com, with an A record pointing to Google's private API address range.
Create a custom route that points Google's private API address range to the default internet gateway as the next hop.

C.Create a private DNS zone with a CNAME record for *.googleapis.com to restricted.googleapis.com, with an A record pointing to Google's restricted API address range.
Create a custom route that points Google's restricted API address range to the default internet gateway as the next hop.

D.Create a private DNS zone with a CNAME record for *.googleapis.com to private.googleapis.com, with an A record painting to Google's private AP address range.
Change the custom route that points the default route (0/0) to the default internet gateway as the next hop.

Premium Bundle

Newest Professional-Cloud-Network-Engineer Exam PDF Dumps shared by BraindumpsPass.com for Helping Passing Professional-Cloud-Network-Engineer Exam! BraindumpsPass.com now offer the updated Professional-Cloud-Network-Engineer exam dumps, the BraindumpsPass.com Professional-Cloud-Network-Engineer exam questions have been updated and answers have been corrected get the latest BraindumpsPass.com Professional-Cloud-Network-Engineer pdf dumps with Exam Engine here:

Access Professional-Cloud-Network-Engineer Premium Version

(236 Q&As Dumps, 40%OFF Special Discount: Exam-Tests)

Other Version: 121Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 496Google.Professional-Cloud-Network-Engineer.v2025-05-14.q111; 587Google.Professional-Cloud-Network-Engineer.v2024-10-28.q109; 1794Google.Professional-Cloud-Network-Engineer.v2023-04-24.q111; 2290Google.Professional-Cloud-Network-Engineer.v2022-03-12.q83; 102Google.Ipassleader.Professional-Cloud-Network-Engineer.v2021-10-07.by.stephanie.79q.pdf

Latest Upload: 104Oracle.1Z0-1057-23.v2025-09-10.q47; 121Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 130SAP.C-S4EWM-2023.v2025-09-08.q83; 147TheSecOpsGroup.CNSP.v2025-09-08.q20; 188CFAInstitute.ESG-Investing.v2025-09-08.q173; 135PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 136Salesforce.Data-Architect.v2025-09-05.q216; 130Adobe.AD0-E605.v2025-09-05.q50; 169Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 113Oracle.1z0-591.v2025-09-05.q104