Free Access Google.Professional-Cloud-Network-Engineer.v2023-04-24.q111 Practice Test (Page 9)

Question 36

You have deployed an HTTP(s) load balancer, but health checks to port 80 on the Compute Engine virtual machine instance are failing, and no traffic is sent to your instances. You want to resolve the problem. Which commands should you run?

A.gcloud compute health-checks update http health-check --unhealthy-threshold 10

B.gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --destination-ranges 130.211.0.0/22,35.191.0.0/16 --direction EGRESS

C.gcloud compute instances add-access-config instance-1

D.gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS

Question 37

You work for one of the biggest digital media company in USA .The company management has decided to move 90 TB of backups and archival data to Google Cloud. They are looking for long term cost effective archival storage for disaster recovery in Google Cloud . Please select the right solution.

A.Storage Transfer and Nearline storage

B.Transfer Appliance and Coldline storage

C.gsutil and Cloud storage

D.Transfer Appliance and Nearline storage

Question 38

All the instances in your project are configured with the custom metadata enable-oslogin value set to FALSE and to block project-wide SSH keys. None of the instances are set with any SSH key, and no project-wide SSH keys have been configured. Firewall rules are set up to allow SSH sessions from any IP address range. You want to SSH into one instance.
What should you do?

A.Open the Cloud Shell SSH into the instance using gcloud compute ssh.

B.Set the custom metadata enable-oslogin to TRUE, and SSH into the instance using a third-party tool like putty or ssh.

C.Generate a new SSH key pair. Verify the format of the private key and add it to the instance.
SSH into the instance using a third-party tool like putty or ssh.

D.Generate a new SSH key pair. Verify the format of the public key and add it to the project.
SSH into the instance using a third-party tool like putty or ssh.

Question 39

In order to provide subnet level isolation, you want to force instance-A in one subnet to route through a security appliance, called instance-B, in another subnet.
What should you do?

A.Create a more specific route than the system-generated subnet route, pointing the next hop to instance-B with no tag.

B.Create a more specific route than the system-generated subnet route, pointing the next hop to instance-B with a tag applied to instance-A.

C.Delete the system-generated subnet route and create a specific route to instance-B with a tag applied to instance-A.

D.Move instance-B to another VPC and, using multi-NIC, connect instance-B's interface to instance-A's network. Configure the appropriate routes to force traffic through to instance-A.

Question 40

You have an application hosted on a Compute Engine virtual machine instance that cannot communicate with a resource outside of its subnet. When you review the flow and firewall logs, you do not see any denied traffic listed.
During troubleshooting you find:
* Flow logs are enabled for the VPC subnet, and all firewall rules are set to log.
* The subnetwork logs are not excluded from Stackdriver.
* The instance that is hosting the application can communicate outside the subnet.
* Other instances within the subnet can communicate outside the subnet.
* The external resource initiates communication.
What is the most likely cause of the missing log lines?

A.The traffic is not matching the expected egress rule.

B.The traffic is not matching the expected ingress rule.

C.The traffic is matching the expected egress rule.

D.The traffic is matching the expected ingress rule.

Premium Bundle

Newest Professional-Cloud-Network-Engineer Exam PDF Dumps shared by BraindumpsPass.com for Helping Passing Professional-Cloud-Network-Engineer Exam! BraindumpsPass.com now offer the updated Professional-Cloud-Network-Engineer exam dumps, the BraindumpsPass.com Professional-Cloud-Network-Engineer exam questions have been updated and answers have been corrected get the latest BraindumpsPass.com Professional-Cloud-Network-Engineer pdf dumps with Exam Engine here:

Access Professional-Cloud-Network-Engineer Premium Version

(236 Q&As Dumps, 40%OFF Special Discount: Exam-Tests)

Other Version: 1958Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 1736Google.Professional-Cloud-Network-Engineer.v2025-05-14.q111; 1867Google.Professional-Cloud-Network-Engineer.v2024-10-28.q109; 1786Google.Professional-Cloud-Network-Engineer.v2023-01-24.q52; 2846Google.Professional-Cloud-Network-Engineer.v2022-03-12.q83; 102Google.Ipassleader.Professional-Cloud-Network-Engineer.v2021-10-07.by.stephanie.79q.pdf

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 292Nokia.4A0-113.v2026-05-01.q69; 251EC-COUNCIL.312-49v11.v2026-04-30.q214; 227Microsoft.MB-820.v2026-04-30.q101; 207Salesforce.MC-202.v2026-04-30.q57; 204BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 457EMC.D-AV-DY-23.v2026-04-27.q184; 1109ServiceNow.CSA.v2026-04-27.q483