Free Access Google.Professional-Cloud-Network-Engineer.v2024-10-28.q109 Practice Test (Page 12)

Question 51

You want to deploy a VPN Gateway to connect your on-premises network to GCP. You are using a non BGP- capable on-premises VPN device. You want to minimize downtime and operational overhead when your network grows. The device supports only IKEv2, and you want to follow Google-recommended practices.
What should you do?

A.* Create a Cloud VPN instance.
* Create a policy-based VPN tunnel per subnet.
* Configure the appropriate local and remote traffic selectors to match your local and remote networks.
* Create the appropriate static routes.

B.* Create a Cloud VPN instance.
* Create a policy-based VPN tunnel.
* Configure the appropriate local and remote traffic selectors to match your local and remote networks.
* Configure the appropriate static routes.

C.* Create a Cloud VPN instance.
* Create a route-based VPN tunnel.
* Configure the appropriate local and remote traffic selectors to match your local and remote networks.
* Configure the appropriate static routes.

D.* Create a Cloud VPN instance.
* Create a route-based VPN tunnel.
* Configure the appropriate local and remote traffic selectors to 0.0.0.0/0.
* Configure the appropriate static routes.

Question 52

You have a storage bucket that contains the following objects:
- folder-a/image-a-1.jpg
- folder-a/image-a-2.jpg
- folder-b/image-b-1.jpg
- folder-b/image-b-2.jpg
Cloud CDN is enabled on the storage bucket, and all four objects have been successfully cached. You want to remove the cached copies of all the objects with the prefix folder-a, using the minimum number of commands.
What should you do?

A.Make sure that all the objects with prefix folder-a are not shared publicly.

B.Disable Cloud CDN on the storage bucket. Wait 90 seconds. Re-enable Cloud CDN on the storage bucket.

C.Add an appropriate lifecycle rule on the storage bucket.

D.Issue a cache invalidation command with pattern /folder-a/*.

Question 53

You need to give each member of your network operations team least-privilege access to create, modify, and delete Cloud Interconnect VLAN attachments.
What should you do?

A.Assign each user the editor role.

B.Assign each user the compute.networkAdmin role.

C.Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get.

D.Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get, compute.routers.create, compute.routers.get, compute.routers.update.

Question 54

You create a Google Kubernetes Engine private cluster and want to use kubectl to get the status of the pods. In one of your instances you notice the master is not responding, even though the cluster is up and running.
What should you do to solve the problem?

A.Create the appropriate master authorized network entries to allow the instance to communicate to the master.

B.Assign a public IP address to the instance.

C.Create the appropriate firewall policy in the VPC to allow traffic from Master node IP address to the instance.

D.Create a route to reach the Master, pointing to the default internet gateway.

Question 55

You have created an HTTP(S) load balanced service. You need to verify that your backend instances are responding properly.
How should you configure the health check?

A.Set request-pathto a specific URL used for health checking, and set proxy-headerto PROXY_V1.

B.Set request-path to a specific URL used for health checking, and set hostto include a custom host header that identifies the health check.

C.Set request-path to a specific URL used for health checking, and set responseto a string that the backend service will always return in the response body.

D.Set proxy-header to the default value, and set hostto include a custom host header that identifies the health check.

Other Version: 2038Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 1756Google.Professional-Cloud-Network-Engineer.v2025-05-14.q111; 2813Google.Professional-Cloud-Network-Engineer.v2023-04-24.q111; 1803Google.Professional-Cloud-Network-Engineer.v2023-01-24.q52; 2862Google.Professional-Cloud-Network-Engineer.v2022-03-12.q83; 102Google.Ipassleader.Professional-Cloud-Network-Engineer.v2021-10-07.by.stephanie.79q.pdf

Latest Upload: 256PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 364Nokia.4A0-113.v2026-05-01.q69; 400EC-COUNCIL.312-49v11.v2026-04-30.q214; 316Microsoft.MB-820.v2026-04-30.q101; 249Salesforce.MC-202.v2026-04-30.q57; 282BICSI.INSTC_V8.v2026-04-29.q53; 417NMLS.MLO.v2026-04-28.q82; 280NCARB.Project-Management.v2026-04-28.q27; 498EMC.D-AV-DY-23.v2026-04-27.q184; 1314ServiceNow.CSA.v2026-04-27.q483

Question 51

Question 52

Question 53

Question 54

Question 55

Download PDF File