Free Access Google.Professional-Cloud-Network-Engineer.v2026-06-03.q145 Practice Test (Page 19)

Question 86

A lead engineer wrote a custom tool that deploys virtual machines in the legacy data center. He wants to migrate the custom tool to the new cloud environment. You want to advocate for the adoption of Google Cloud Deployment Manager. What are two business risks of migrating to Cloud Deployment Manager? Choose 2 answers

A.Cloud Deployment Manager can be used to permanently delete cloud resources.

B.Cloud Deployment Manager only supports automation of Google Cloud resources.

C.Cloud Deployment Manager requires a Google APIs service account to run.

D.Cloud Deployment Manager APIs could be deprecated in the future.

E.Cloud Deployment Manager uses Python.

F.Cloud Deployment Manager is unfamiliar to the company's engineers.

Question 87

You want Cloud CDN to serve the https://www.example.com/images/spacetime.png static image file that is hosted in a private Cloud Storage bucket, You are using the VSE ORIG.-X_NZADERS cache mode You receive an HTTP 403 error when opening the file In your browser and you see that the HTTP response has a Cache-control: private, max-age=O header How should you correct this Issue?

A.Configure a Cloud Storage bucket permission that gives the Storage Legacy Object Reader role

B.Change the cache mode to cache all content.

C.Increase the default time-to-live (TTL) for the backend service.

D.Enable negative caching for the backend bucket

Question 88

Question:
You are troubleshooting connectivity issues between Google Cloud and a public SaaS provider. Connectivity between the two environments is through the public internet. Your users are reporting intermittent connection errors when using TCP to connect; however, ICMP tests show no failures. According to users, errors occur around the same time every day. You want to troubleshoot and gather information by using Google Cloud tools that are most likely to provide insights into what is occurring within Google Cloud. What should you do?

A.Create a Connectivity Test by using TCP, the source IP address of your test VM, and the destination IP address of the public SaaS provider. Review the live data plane analysis and take the next steps based on the test results.

B.Enable and review Cloud Logging on your Cloud NAT gateway. Look for logs with errors matching the destination IP address of the public SaaS provider.

C.Enable the Firewall insights API. Set the deny rule insights observation period to one day. Review the insights to assure there are no firewall rules denying traffic.

D.Enable and review Cloud Logging for Cloud Armor. Look for logs with errors matching the destination IP address of the public SaaS provider.

Question 89

You have created several preemptible Linux virtual machine instances using Google Compute Engine. You want to properly shut down your application before the virtual machines are preempted. What should you do?

A.Create a shutdown script registered as a xinetd service in Linux and configure a StackDriver endpoint check to call the service.

B.Create a shutdown script, registered as a xinetd service in Linux, and use the gcloud compute instances add-metadata command to specify the service URL as the value for a new metadata entry with the key shutdown-script-url

C.Create a shutdown script named shutdown in the /etc/ directory.

D.Create a shutdown script and use it as the value for a new metadata entry with the key shutdown- script in the Cloud Platform Console when you create the new virtual machine instance.

Question 90

Your company has recently installed a Cloud VPN tunnel between your on-premises data center and your Google Cloud Virtual Private Cloud (VPC). You need to configure access to the Cloud Functions API for your on-premises servers. The configuration must meet the following requirements:
Certain data must stay in the project where it is stored and not be exfiltrated to other projects.
Traffic from servers in your data center with RFC 1918 addresses do not use the internet to access Google Cloud APIs.
All DNS resolution must be done on-premises.
The solution should only provide access to APIs that are compatible with VPC Service Controls.
What should you do?

A.Create an A record for restricted.googleapis.com using the 199.36.153.4/30 address range.
Create a CNAME record for *.googleapis.com that points to the A record.
Configure your on-premises routers to use the Cloud VPN tunnel as the next hop for the addresses you used in the A record.
Remove the default internet gateway from the VPC where your Cloud VPN tunnel terminates.

B.Create an A record for private.googleapis.com using the 199.36.153.8/30 address range.
Create a CNAME record for *.googleapis.com that points to the A record.
Configure your on-premises routers to use the Cloud VPN tunnel as the next hop for the addresses you used in the A record.
Configure your on-premises firewalls to allow traffic to the private.googleapis.com addresses.

C.Create an A record for restricted.googleapis.com using the 199.36.153.4/30 address range.
Create a CNAME record for *.googleapis.com that points to the A record.
Configure your on-premises routers to use the Cloud VPN tunnel as the next hop for the addresses you used in the A record.
Configure your on-premises firewalls to allow traffic to the restricted.googleapis.com addresses.

D.Create an A record for private.googleapis.com using the 199.36.153.8/30 address range.
Create a CNAME record for *.googleapis.com that points to the A record.
Configure your on-premises routers to use the Cloud VPN tunnel as the next hop for the addresses you used in the A record.
Remove the default internet gateway from the VPC where your Cloud VPN tunnel terminates.

Other Version: 2395Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 1945Google.Professional-Cloud-Network-Engineer.v2025-05-14.q111; 2132Google.Professional-Cloud-Network-Engineer.v2024-10-28.q109; 2969Google.Professional-Cloud-Network-Engineer.v2023-04-24.q111; 1940Google.Professional-Cloud-Network-Engineer.v2023-01-24.q52; 3025Google.Professional-Cloud-Network-Engineer.v2022-03-12.q83; 102Google.Ipassleader.Professional-Cloud-Network-Engineer.v2021-10-07.by.stephanie.79q.pdf

Latest Upload: 104MedicalProfessional.CCM.v2026-08-20.q62; 206Cisco.300-610.v2026-08-19.q170; 204CompTIA.PT0-003.v2026-08-19.q179; 153Databricks.Databricks-Generative-AI-Engineer-Associate.v2026-08-18.q40; 148SAP.C_CR125_2601.v2026-08-17.q28; 210Salesforce.Field-Service-Consultant.v2026-08-17.q134; 167Oracle.1Z0-1170.v2026-08-16.q64; 176Oracle.1Z1-1170.v2026-08-16.q64; 200Juniper.JN0-336.v2026-08-13.q60; 380EMC.NCP-AII.v2026-08-13.q200

Question 86

Question 87

Question 88

Question 89

Question 90

Download PDF File