Free Access Google.Professional-Cloud-Network-Engineer.v2026-06-03.q145 Practice Test (Page 18)

Question 81

You have the following Shared VPC design VPC Flow Logs is configured for Subnet-1 In the host VPC. You also want to monitor flow logs for Subnet-2. What should you do?

A.Configure a firewall rule to permit Subnet-2 IP addresses outbound in the host protect VPC.

B.Configure Packet Mirroring in both the host and service project VPCs.

C.Configure a VPC Flow Logs filter for Subnet-2 in the host project VPC.

D.Configure VPC Flow Logs in the service project VPC for Subnet-2.

Question 82

You have a storage bucket that contains two objects. Cloud CDN is enabled on the bucket, and both objects have been successfully cached. Now you want to make sure that one of the two objects will not be cached anymore, and will always be served to the internet directly from the origin.
What should you do?

A.Ensure that the object you don't want to be cached anymore is not shared publicly.

B.Create a new storage bucket, and move the object you don't want to be checked anymore inside it. Then edit the bucket setting and enable the private attribute.

C.Add an appropriate lifecycle rule on the storage bucket containing the two objects.

D.Add a Cache-Control entry with value private to the metadata of the object you don't want to be cached anymore. Invalidate all the previously cached copies.

Question 83

You are increasing your usage of Cloud VPN between on-premises and GCP, and you want to support more traffic than a single tunnel can handle. You want to increase the available bandwidth using Cloud VPN.
What should you do?

A.Double the MTU on your on-premises VPN gateway from 1460 bytes to 2920 bytes.

B.Create two VPN tunnels on the same Cloud VPN gateway that point to the same destination VPN gateway IP address.

C.Add a second on-premises VPN gateway with a different public IP address. Create a second tunnel on the existing Cloud VPN gateway that forwards the same IP range, but points at the new on-premises gateway IP.

D.Add a second Cloud VPN gateway in a different region than the existing VPN gateway. Create a new tunnel on the second Cloud VPN gateway that forwards the same IP range, but points to the existing on-premises VPN gateway IP address.

Question 84

You recently configured Google Cloud Armor security policies to manage traffic to your application. You discover that Google Cloud Armor is incorrectly blocking some traffic to your application. You need to identity the web application firewall (WAF) rule that is incorrectly blocking traffic. What should you do?

A.Enable VPC Flow Logs, and view the logs in Cloud Logging.

B.Enable firewall logs, and view the logs in Firewall Insights.

C.Enable Google Cloud Armor audit logs, and view the logs on the Activity page in the Google Cloud Console.

D.Enable HTTP(S) Load Balancing logging with sampling rate equal to 1, and view the logs in Cloud Logging.

Question 85

Your company just completed the acquisition of Altostrat (a current GCP customer). Each company has a separate organization in GCP and has implemented a custom DNS solution. Each organization will retain its current domain and host names until after a full transition and architectural review is done in one year. These are the assumptions for both GCP environments.
* Each organization has enabled full connectivity between all of its projects by using Shared VPC.
* Both organizations strictly use the 10.0.0.0/8 address space for their instances, except for bastion hosts (for accessing the instances) and load balancers for serving web traffic.
* There are no prefix overlaps between the two organizations.
* Both organizations already have firewall rules that allow all inbound and outbound traffic from the 10.0.0.0
/8 address space.
* Neither organization has Interconnects to their on-premises environment.
You want to integrate networking and DNS infrastructure of both organizations as quickly as possible and with minimal downtime.
Which two steps should you take? (Choose two.)

A.Provision Cloud Interconnect to connect both organizations together.

B.Set up some variant of DNS forwarding and zone transfers in each organization.

C.Connect VPCs in both organizations using Cloud VPN together with Cloud Router.

D.Use Cloud DNS to create A records of all VMs and resources across all projects in both organizations.

E.Create a third organization with a new host project, and attach all projects from your company and Altostrat to it using shared VPC.

Other Version: 2391Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 1942Google.Professional-Cloud-Network-Engineer.v2025-05-14.q111; 2130Google.Professional-Cloud-Network-Engineer.v2024-10-28.q109; 2966Google.Professional-Cloud-Network-Engineer.v2023-04-24.q111; 1939Google.Professional-Cloud-Network-Engineer.v2023-01-24.q52; 3022Google.Professional-Cloud-Network-Engineer.v2022-03-12.q83; 102Google.Ipassleader.Professional-Cloud-Network-Engineer.v2021-10-07.by.stephanie.79q.pdf

Latest Upload: 132Databricks.Databricks-Generative-AI-Engineer-Associate.v2026-08-18.q40; 143SAP.C_CR125_2601.v2026-08-17.q28; 181Salesforce.Field-Service-Consultant.v2026-08-17.q134; 151Oracle.1Z0-1170.v2026-08-16.q64; 158Oracle.1Z1-1170.v2026-08-16.q64; 193Juniper.JN0-336.v2026-08-13.q60; 327EMC.NCP-AII.v2026-08-13.q200; 206CIRO.RSE.v2026-08-12.q41; 175CrowdStrike.CCSE-204.v2026-08-12.q50; 163ISQI.CT-GenAI.v2026-08-11.q14

Question 81

Question 82

Question 83

Question 84

Question 85

Download PDF File