Free Access Google.Professional-Cloud-Network-Engineer.v2026-06-03.q145 Practice Test (Page 25)

Question 116

You are using the gcloud command line tool to create a new custom role in a project by coping a predefined role. You receive this error message:
INVALID_ARGUMENT: Permission resourcemanager.projects.list is not valid What should you do?

A.Add the resourcemanager.projects.setIamPolicy permission, and try again.

B.Add the resourcemanager.projects.get permission, and try again.

C.Remove the resourcemanager.projects.list permission, and try again.

D.Try again with a different role with a new name but the same permissions.

Question 117

You are designing a shared VPC architecture. Your network and security team has strict controls over which routes are exposed between departments. Your Production and Staging departments can communicate with each other, but only via specific networks. You want to follow Google- recommended practices.
How should you design this topology?

A.Create 2 shared VPCs within the shared VPC Host Project, and enable VPC peering between them.
Use firewall rules to filter access between the specific networks.

B.Create 2 shared VPCs within the shared VPC Host Project, and create a Cloud VPN/Cloud Router between them.
Use Flexible Route Advertisement (FRA) to filter access between the specific networks.

C.Create 2 shared VPCs within the shared VPC Service Project, and create a Cloud VPN/Cloud Router between them.
Use Flexible Route Advertisement (FRA) to filter access between the specific networks.

D.Create 1 VPC within the shared VPC Host Project, and share individual subnets with the Service Projects to filter access between the specific networks.

Question 118

Your team is developing an application that will be used by consumers all over the world. Currently, the application sits behind a global external application load balancer You need to protect the application from potential application-level attacks. What should you do?

A.Enable Cloud CDN on the backend service.

B.Create multiple firewall deny rules to block malicious users, and apply them to the global external application load balancer

C.Create a Google Cloud Armor security policy with web application firewall rules, and apply the security policy to the backend service.

D.Create a VPC Service Controls perimeter with the global external application load balancer as the protected service, and apply it to the backend service

Question 119

You have just deployed your infrastructure on Google Cloud. You now need to configure the DNS to meet the following requirements:
Your on-premises resources should resolve your Google Cloud zones.
Your Google Cloud resources should resolve your on-premises zones.
You need the ability to resolve ".internal" zones provisioned by Google Cloud.
What should you do?

A.Configure Cloud DNS to DNS peer with your on-premises DNS resolver. Configure your on-premises DNS resolver to forward Google Cloud zone queries to Google's public DNS 8.8.8.8.

B.Configure both an inbound server policy and outbound DNS forwarding zones with the target as the on-premises DNS resolver. Configure your on-premises DNS resolver to forward Google Cloud zone queries to Google Cloud's DNS resolver.

C.Configure an outbound DNS server policy, and set your alternative name server to be your on-premises DNS resolver. Configure your on-premises DNS resolver to forward Google Cloud zone queries to Google Cloud's DNS resolver.

D.Configure an outbound server policy, and set your alternative name server to be your on-premises DNS resolver. Configure your on-premises DNS resolver to forward Google Cloud zone queries to Google's public DNS 8.8.8.8.

Question 120

Your company's security team tends to use managed services when possible. You need to build a dashboard to show the number of deny hits that occur against configured firewall rules without increasing operational overhead. What should you do?

A.Configure Packet Mirroring on the VPC. Apply a filter with an IP address list of the Denied Firewall rules. Configure an intrusion detection system (IDS) appliance as the receiver to display the number of hits.

B.Configure Firewall Rules Logging. View the logs in Cloud Logging, and create a custom dashboard in Cloud Monitoring to display the number of hits.

C.Configure a firewall appliance from the Google Cloud Marketplace. Route all traffic through this appliance, and apply the firewall rules at this layer. Use the firewall appliance to display the number of hits.

D.Configure Firewall Rules Logging. Use Firewall Insights to display the number of hits.

Other Version: 2391Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 1942Google.Professional-Cloud-Network-Engineer.v2025-05-14.q111; 2130Google.Professional-Cloud-Network-Engineer.v2024-10-28.q109; 2966Google.Professional-Cloud-Network-Engineer.v2023-04-24.q111; 1939Google.Professional-Cloud-Network-Engineer.v2023-01-24.q52; 3022Google.Professional-Cloud-Network-Engineer.v2022-03-12.q83; 102Google.Ipassleader.Professional-Cloud-Network-Engineer.v2021-10-07.by.stephanie.79q.pdf

Latest Upload: 132Databricks.Databricks-Generative-AI-Engineer-Associate.v2026-08-18.q40; 145SAP.C_CR125_2601.v2026-08-17.q28; 182Salesforce.Field-Service-Consultant.v2026-08-17.q134; 161Oracle.1Z0-1170.v2026-08-16.q64; 168Oracle.1Z1-1170.v2026-08-16.q64; 194Juniper.JN0-336.v2026-08-13.q60; 327EMC.NCP-AII.v2026-08-13.q200; 209CIRO.RSE.v2026-08-12.q41; 175CrowdStrike.CCSE-204.v2026-08-12.q50; 163ISQI.CT-GenAI.v2026-08-11.q14

Question 116

Question 117

Question 118

Question 119

Question 120

Download PDF File