Free Access Google.Professional-Cloud-Network-Engineer.v2025-05-14.q111 Practice Test (Page 6)

Question 21

Your company has just launched a new critical revenue-generating web application. You deployed the application for scalability using managed instance groups, autoscaling, and a network load balancer as frontend. One day, you notice severe bursty traffic that the caused autoscaling to reach the maximum number of instances, and users of your application cannot complete transactions. After an investigation, you think it as a DDOS attack. You want to quickly restore user access to your application and allow successful transactions while minimizing cost.
Which two steps should you take? (Choose two.)

A.Use Cloud Armor to blacklist the attacker's IP addresses.

B.Shut down the entire application in GCP for a few hours. The attack will stop when the application is offline.

C.Create a global HTTP(s) load balancer and move your application backend to this load balancer.

D.SSH into the backend compute engine instances, and view the auth logs and syslogs to further understand the nature of the attack.

E.Increase the maximum autoscaling backend to accommodate the severe bursty traffic.

Question 22

You have deployed a proof-of-concept application by manually placing instances in a single Compute Engine zone. You are now moving the application to production, so you need to increase your application availability and ensure it can autoscale.
How should you provision your instances?

A.Create a single managed instance group, specify the desired region, and select Multiple zones for the location.

B.Create a managed instance group for each region, select Single zone for the location, and manually distribute instances across the zones in that region.

C.Create an unmanaged instance group in a single zone, and then create an HTTP load balancer for the instance group.

D.Create an unmanaged instance group for each zone, and manually distribute the instances across the desired zones.

Question 23

You have enabled HTTP(S) load balancing for your application, and your application developers have reported that HTTP(S) requests are not being distributed correctly to your Compute Engine Virtual Machine instances. You want to find data about how the request are being distributed.
Which two methods can accomplish this? (Choose two.)

A.On the Load Balancer details page of the GCP Console, click on the Monitoring tab, select your backend service, and look at the graphs.

B.In Stackdriver Error Reporting, look for any unacknowledged errors for the Cloud Load Balancers service.

C.In Stackdriver Monitoring, create a new dashboard and track the https/backend_request_count metric for the load balancer.

D.In Stackdriver Monitoring, select Resources > Google Cloud Load Balancers and review the Key Metrics graphs in the dashboard.

E.In Stackdriver Monitoring, select Resources > Metrics Explorer and search for https/request_bytes_count metric.

Question 24

You are maintaining a Shared VPC in a host project. Several departments within your company have infrastructure in different service projects attached to the Shared VPC and use Identity and Access Management (IAM) permissions to manage the cloud resources in those projects. VPC Network Peering is also set up between the Shared VPC and a common services VPC that is not in a service project. Several users are experiencing failed connectivity between certain instances in different Shared VPC service projects and between certain instances and the internet. You need to validate the network configuration to identify whether a misconfiguration is the root cause of the problem. What should you do?

A.Run Connectivity Tests from Network Intelligence Center to check connectivity between the affected endpoints in your network and the internet.

B.Use Secure Shell (SSH) to connect to the affected Compute Engine instances, and run a series of PING tests to the other affected endpoints and the 8.8.8.8 IPv4 address.

C.Review the VPC audit logs in Cloud Logging for the affected instances.

D.Enable VPC Flow Logs for all VPCs, and review the logs in Cloud Logging for the affected instances.

Question 25

You created a VPC network named Retail in auto mode. You want to create a VPC network named Distribution and peer it with the Retail VPC.
How should you configure the Distribution VPC?

A.Create the Distribution VPC in auto mode. Peer both the VPCs via network peering.

B.Create the Distribution VPC in custom mode. Use the CIDR range 10.0.0.0/9. Create the necessary subnets, and then peer them via network peering.

C.Create the Distribution VPC in custom mode. Use the CIDR range 10.128.0.0/9. Create the necessary subnets, and then peer them via network peering.

D.Rename the default VPC as "Distribution" and peer it via network peering.

Other Version: 2242Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 2018Google.Professional-Cloud-Network-Engineer.v2024-10-28.q109; 2924Google.Professional-Cloud-Network-Engineer.v2023-04-24.q111; 1885Google.Professional-Cloud-Network-Engineer.v2023-01-24.q52; 2958Google.Professional-Cloud-Network-Engineer.v2022-03-12.q83; 102Google.Ipassleader.Professional-Cloud-Network-Engineer.v2021-10-07.by.stephanie.79q.pdf

Latest Upload: 428PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 538Nokia.4A0-113.v2026-05-01.q69; 596EC-COUNCIL.312-49v11.v2026-04-30.q214; 549Microsoft.MB-820.v2026-04-30.q101; 423Salesforce.MC-202.v2026-04-30.q57; 461BICSI.INSTC_V8.v2026-04-29.q53; 572NMLS.MLO.v2026-04-28.q82; 396NCARB.Project-Management.v2026-04-28.q27; 744EMC.D-AV-DY-23.v2026-04-27.q184; 1949ServiceNow.CSA.v2026-04-27.q483

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File