Question 66

In order to provide subnet level isolation, you want to force instance-A in one subnet to route through a security appliance, called instance-B, in another subnet.
What should you do?
  • Question 67

    You decide to set up Cloud NAT. After completing the configuration, you find that one of your instances is not using the Cloud NAT for outbound NAT.
    What is the most likely cause of this problem?
  • Question 68

    You need to ensure your personal SSH key works on every instance in your project. You want to accomplish this as efficiently as possible.
    What should you do?
  • Question 69

    Your organization is deploying a single project for 3 separate departments. Two of these departments require network connectivity between each other, but the third department should remain in isolation. Your design should create separate network administrative domains between these departments. You want to minimize operational overhead.
    How should you design the topology?
  • Question 70

    You are using a third-party next-generation firewall to inspect traffic. You created a custom route of 0.0.0.0/0 to route egress traffic to the firewall. You want to allow your VPC instances without public IP addresses to access the BigQuery and Cloud Pub/Sub APIs, without sending the traffic through the firewall.
    Which two actions should you take? (Choose two.)