Free Access Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179 Practice Test (Page 28)

Question 131

You have deployed an HTTP(s) load balancer, but health checks to port 80 on the Compute Engine virtual machine instance are failing, and no traffic is sent to your instances. You want to resolve the problem. Which commands should you run?

A.gcloud compute health-checks update http health-check --unhealthy-threshold 10

B.gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS

C.gcloud compute instances add-access-config instance-1

D.gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --destination-ranges 130.211.0.0/22,35.191.0.0/16 --direction EGRESS

Question 132

Your company's on-premises network is connected to a VPC using a Cloud VPN tunnel. You have a static route of 0.0.0.0/0 with the VPN tunnel as its next hop defined in the VPC. All internet bound traffic currently passes through the on-premises network. You configured Cloud NAT to translate the primary IP addresses of Compute Engine instances in one region. Traffic from those instances will now reach the internet directly from their VPC and not from the on-premises network. Traffic from the virtual machines (VMs) is not translating addresses as expected. What should you do?

A.Lower the TCP Established Connection Idle Timeout for the NAT gateway.

B.Increase the default min-ports-per-vm setting for the Cloud NAT gateway.

C.Add firewall rules that allow ingress and egress of the external NAT IP address, have a target tag that is on the Compute Engine instances, and have a priority value higher than the priority value of the default route to the VPN gateway.

D.Add a default static route to the VPC with the default internet gateway as the next hop, the network tag associated with the Compute Engine instances, and a higher priority than the priority of the default route to the VPN tunnel.

Question 133

You recently deployed your application in Google Cloud. You need to verify your Google Cloud network configuration before deploying your on-premises workloads. You want to confirm that your Google Cloud network configuration allows traffic to flow from your cloud resources to your on- premises network. This validation should also analyze and diagnose potential failure points in your Google Cloud network configurations without sending any data plane test traffic. What should you do?

A.Use Network Intelligence Center's Network Topology visualizations.

B.Enable Packet Mirroring on your application and send test traffic.

C.Enable VPC Flow Logs and send test traffic.

D.Use Network Intelligence Center's Connectivity Tests.

Question 134

Question:
Your organization is developing a landing zone architecture with the following requirements:
* No communication between production and non-production environments.
* Communication between applications within an environment may be necessary.
* Network administrators should centrally manage all network resources, including subnets, routes, and firewall rules.
* Each application should be billed separately.
* Developers of an application within a project should have the autonomy to create their compute resources.
* Up to 1000 applications are expected per environment.
What should you do?

A.Create a design that has a Shared VPC for each project. Implement hierarchical firewall policies to apply micro-segmentation between VPCs.

B.Create a design where each project has its own VPC. Ensure all VPCs are connected by a Network Connectivity Center hub that is centrally managed by the network team.

C.Create a design that implements a single Shared VPC. Use VPC firewall rules with secure tags to enforce micro-segmentation between environments.

D.Create a design that has one host project with a Shared VPC for the production environment, another host project with a Shared VPC for the non-production environment, and a service project that is associated with the corresponding host project for each initiative.

Question 135

Your company's Google Cloud-deployed, streaming application supports multiple languages. The application development team has asked you how they should support splitting audio and video traffic to different backend Google Cloud storage buckets. They want to use URL maps and minimize operational overhead. They are currently using the following directory structure:
/fr/video
/en/video
/es/video
/../video
/fr/audio
/en/audio
/es/audio
/../audio
Which solution should you recommend?

A.Leave the directory structure as-is, create a URL map and leverage a path rule such as /*/video and /*/ audio.

B.Rearrange the directory structure, create DNS hostname entries for video and audio and leverage a path rule such as /video/* and /audio/*.

C.Leave the directory structure as-is, create a URL map and leverage a path rule such as \/[a-z]{2}\/video and
\/[a-z]{2}\/audio.

D.Rearrange the directory structure, create a URL map and leverage a path rule such as /video/* and /audio/
*.

Other Version: 496Google.Professional-Cloud-Network-Engineer.v2025-05-14.q111; 587Google.Professional-Cloud-Network-Engineer.v2024-10-28.q109; 1794Google.Professional-Cloud-Network-Engineer.v2023-04-24.q111; 1382Google.Professional-Cloud-Network-Engineer.v2023-01-24.q52; 2290Google.Professional-Cloud-Network-Engineer.v2022-03-12.q83; 102Google.Ipassleader.Professional-Cloud-Network-Engineer.v2021-10-07.by.stephanie.79q.pdf

Latest Upload: 104Oracle.1Z0-1057-23.v2025-09-10.q47; 129Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 130SAP.C-S4EWM-2023.v2025-09-08.q83; 147TheSecOpsGroup.CNSP.v2025-09-08.q20; 188CFAInstitute.ESG-Investing.v2025-09-08.q173; 135PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 136Salesforce.Data-Architect.v2025-09-05.q216; 130Adobe.AD0-E605.v2025-09-05.q50; 169Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 113Oracle.1z0-591.v2025-09-05.q104

Question 131

Question 132

Question 133

Question 134

Question 135

Download PDF File