Question 21

You create a Google Kubernetes Engine private cluster and want to use kubectl to get the status of the pods.
In one of your instances you notice the master is not responding, even though the cluster is up and running.
What should you do to solve the problem?
  • Question 22

    You have configured a Compute Engine virtual machine instance as a NAT gateway. You execute the following command:
    gcloud compute routes create no-ip-internet-route \
    --network custom-network1 \
    --destination-range 0.0.0.0/0 \
    --next-hop instance nat-gateway \
    --next-hop instance-zone us-central1-a \
    --tags no-ip --priority 800
    You want existing instances to use the new NAT gateway. Which command should you execute?
  • Question 23

    You have the following routing design. You discover that Compute Engine instances in Subnet-2 in the asia-southeast1 region cannot communicate with compute resources on-premises. What should you do?
  • Question 24

    Your end users are located in close proximity to us-east1 and europe-west1. Their workloads need to communicate with each other. You want to minimize cost and increase network efficiency.
    How should you design this topology?
  • Question 25

    You suspect that one of the virtual machines (VMs) in your default Virtual Private Cloud (VPC) is under a denial-of-service attack. You need to analyze the incoming traffic for the VM to understand where the traffic is coming from. What should you do?