Free Access Google.Professional-Cloud-Network-Engineer.v2024-10-28.q109 Practice Test (Page 3)

Question 6

You work for a university that is migrating to GCP.
These are the cloud requirements:
* On-premises connectivity with 10 Gbps
* Lowest latency access to the cloud
* Centralized Networking Administration Team
New departments are asking for on-premises connectivity to their projects. You want to deploy the most cost-efficient interconnect solution for connecting the campus to Google Cloud.
What should you do?

A.Use Shared VPC, and deploy the VLAN attachments and Interconnect in the host project.

B.Use Shared VPC, and deploy the VLAN attachments in the service projects. Connect the VLAN attachment to the Shared VPC's host project.

C.Use standalone projects, and deploy the VLAN attachments in the individual projects. Connect the VLAN attachment to the standalone projects' Interconnects.

D.Use standalone projects and deploy the VLAN attachments and Interconnects in each of the individual projects.

Question 7

You are designing a new global application using Compute Engine instances that will be exposed by a global HTTP(S) load balancer. You need to secure your application from distributed denial-of-service and application layer (layer 7) attacks. What should you do?

A.Configure hierarchical firewall rules for the global HTTP(S) load balancer public IP address at the organization level.

B.Configure VPC firewall rules to protect the Compute Engine instances against distributed denial-of-service attacks.

C.Configure a Google Cloud Armor security policy in your project, and attach it to the backend service to secure the application.

D.Configure VPC Service Controls and create a secure perimeter. Define fine-grained perimeter controls and enforce that security posture across your Google Cloud services and projects.

Question 8

In your company, two departments with separate GCP projects (code-dev and data-dev) in the same organization need to allow full cross-communication between all of their virtual machines in GCP. Each department has one VPC in its project and wants full control over their network. Neither department intends to recreate its existing computing resources. You want to implement a solution that minimizes cost.
Which two steps should you take? (Choose two.)

A.Connect the VPCs in project code-dev and data-dev using VPC Network Peering.

B.Enable firewall rules to allow all ingress traffic from all subnets of project code-dev to all instances in project data-dev, and vice versa.

C.Create a route in the code-dev project to the destination prefixes in project data-dev and use nexthop as the default gateway, and vice versa.

D.Connect both projects using Cloud VPN.

E.Enable Shared VPC in one project (e. g., code-dev), and make the second project (e. g., data-dev) a service project.

Question 9

All the instances in your project are configured with the custom metadata enable-oslogin value set to FALSE and to block project-wide SSH keys. None of the instances are set with any SSH key, and no project-wide SSH keys have been configured. Firewall rules are set up to allow SSH sessions from any IP address range. You want to SSH into one instance.
What should you do?

A.Set the custom metadata enable-oslogin to TRUE, and SSH into the instance using a third-party tool like putty or ssh.

B.Generate a new SSH key pair. Verify the format of the private key and add it to the instance. SSH into the instance using a third-party tool like putty or ssh.

C.Generate a new SSH key pair. Verify the format of the public key and add it to the project. SSH into the instance using a third-party tool like putty or ssh.

D.Open the Cloud Shell SSH into the instance using gcloud compute ssh.

Question 10

You are creating a new application and require access to Cloud SQL from VPC instances without public IP addresses.
Which two actions should you take? (Choose two.)

A.Activate the Service Networking API in your project.

B.Activate the Cloud Datastore API in your project.

C.Create a private connection to a service producer.

D.Create a custom static route to allow the traffic to reach the Cloud SQL API.

E.Enable Private Google Access.

Other Version: 1958Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 1736Google.Professional-Cloud-Network-Engineer.v2025-05-14.q111; 2766Google.Professional-Cloud-Network-Engineer.v2023-04-24.q111; 1786Google.Professional-Cloud-Network-Engineer.v2023-01-24.q52; 2846Google.Professional-Cloud-Network-Engineer.v2022-03-12.q83; 102Google.Ipassleader.Professional-Cloud-Network-Engineer.v2021-10-07.by.stephanie.79q.pdf

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 292Nokia.4A0-113.v2026-05-01.q69; 250EC-COUNCIL.312-49v11.v2026-04-30.q214; 227Microsoft.MB-820.v2026-04-30.q101; 207Salesforce.MC-202.v2026-04-30.q57; 204BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 457EMC.D-AV-DY-23.v2026-04-27.q184; 1109ServiceNow.CSA.v2026-04-27.q483

Question 6

Question 7

Question 8

Question 9

Question 10

Download PDF File