Free Access Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179 Practice Test (Page 21)

Question 96

You have applications running in the us-west1 and us-east1 regions. You want to build a highly available VPN that provides 99.99% availability to connect your applications from your project to the cloud services provided by your partner's project while minimizing the amount of infrastructure required. Your partner's services are also in the us-west1 and us-east1 regions. You want to implement the simplest solution. What should you do?

A.Create one Cloud Router and one HA VPN gateway in each region of your VPC and your partner's VPC. Connect your VPN gateways to the partner's gateways. Enable global dynamic routing in each VPC.

B.Create one OpenVPN Access Server in each region of your VPC and your partner's VPC. Connect your servers to the partner's servers.

C.Create one Cloud Router and one HA VPN gateway in the us-west1 region of your VPC. Create one OpenVPN Access Server in each region of your partner's VPC. Connect your VPN gateway to your partner's servers.

D.Create one Cloud Router and one HA VPN gateway in the us-west1 region of your VPC and your partner's VPC. Connect your VPN gateways to the partner's gateways with a pair of tunnels. Enable global dynamic routing in each VPC.

Question 97

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a traffic-scrubbing service and want to restrict your origin to allow connections only from the traffic-scrubbing service.
What should you do?

A.Create a VPC Firewall rule that blocks all traffic except for the traffic-scrubbing service.

B.Create IPTables firewall rules that block all traffic except for the traffic-scrubbing service.

C.Create a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service.

D.Create a VPC Service Control Perimeter that blocks all traffic except for the traffic-scrubbing service.

Question 98

One instance in your VPC is configured to run with a private IP address only. You want to ensure that even if this instance is deleted, its current private IP address will not be automatically assigned to a different instance.
In the GCP Console, what should you do?

A.Assign a public IP address to the instance.

B.Assign a new reserved internal IP address to the instance.

C.Change the instance's current internal IP address to static.

D.Add custom metadata to the instance with key internal-address and value reserved.

Question 99

You want to create a service in GCP using IPv6.
What should you do?

A.Create the instance with the designated IPv6 address.

B.Configure a TCP Proxy with the designated IPv6 address.

C.Configure a global load balancer with the designated IPv6 address.

D.Configure an internal load balancer with the designated IPv6 address.

Question 100

You need to configure the Border Gateway Protocol (BGP) session for a VPN tunnel you just created between two Google Cloud VPCs, 10.1.0.0/16 and 172.16.0.0/16. You have a Cloud Router (router-1) in the 10.1.0.0
/16 network and a second Cloud Router (router-2) in the 172.16.0.0/16 network. Which configuration should you use for the BGP session?