Free Access Google.Professional-Cloud-Network-Engineer.v2026-06-03.q145 Practice Test (Page 9)

Question 36

You have a web application that is currently hosted in the us-central1 region. Users experience high latency when traveling in Asia. You've configured a network load balancer, but users have not experienced a performance improvement. You want to decrease the latency.
What should you do?

A.Configure a policy-based route rule to prioritize the traffic.

B.Configure an HTTP load balancer, and direct the traffic to it.

C.Configure Dynamic Routing for the subnet hosting the application.

D.Configure the TTL for the DNS zone to decrease the time between updates.

Question 37

You want to deploy a VPN Gateway to connect your on-premises network to GCP. You are using a non BGP-capable on-premises VPN device. You want to minimize downtime and operational overhead when your network grows. The device supports only IKEv2, and you want to follow Google-recommended practices.
What should you do?

A.* Create a Cloud VPN instance.* Create a route-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Configure the appropriate static routes.

B.* Create a Cloud VPN instance.* Create a policy-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Configure the appropriate static routes.

C.* Create a Cloud VPN instance.* Create a policy-based VPN tunnel per subnet.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Create the appropriate static routes.

D.* Create a Cloud VPN instance.* Create a route-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to 0.0.0.0/0.* Configure the appropriate static routes.

Question 38

Your company's current network architecture has three VPC Service Controls perimeters:
One perimeter (PERIMETER_PROD) to protect production storage buckets
One perimeter (PERIMETER_NONPROD) to protect non-production storage buckets One perimeter (PERIMETER_VPC) that contains a single VPC (VPC_ONE) In this single VPC (VPC_ONE), the IP_RANGE_PROD is dedicated to the subnets of the production workloads, and the IP_RANGE_NONPROD is dedicated to subnets of non-production workloads. Workloads cannot be created outside those two ranges. You need to ensure that production workloads can access only production storage buckets and non-production workloads can access only non-production storage buckets with minimal setup effort. What should you do?

A.Develop a design that uses the IP_RANGE_PROD and IP_RANGE_NONPROD perimeters to create two access levels, with each access level referencing a single range. Create two ingress access policies with each access policy referencing one of the two access levels. Update the PERIMETER_PROD and PERIMETER_NONPROD perimeters.

B.Develop a design that removes the PERIMETER_VPC perimeter. Update the PERIMETER_NONPROD perimeter to include the project containing VPC_ONE. Remove the PERIMETER_PROD perimeter.

C.Develop a design that creates a new VPC (VPC_NONPROD) in the same project as VPC_ONE. Migrate all the non-production workloads from VPC_ONE to the PERIMETER_NONPROD perimeter. Remove the PERIMETER_VPC perimeter. Update the PERIMETER_PROD perimeter to include VPC_ONE and the PERIMETER_NONPROD perimeter to include VPC_NONPROD.

D.Develop a design that removes the PERIMETER_VPC perimeter. Update the PERIMETER_PROD perimeter to include the project containing VPC_ONE. Remove the PERIMETER_NONPROD perimeter.

Question 39

You created a new VPC for your development team. You want to allow access to the resources in this VPC via SSH only.
How should you configure your firewall rules?

A.Create two firewall rules: one to block all traffic with priority 0, and another to allow port 22 with priority 1000.

B.Create two firewall rules: one to block all traffic with priority 65536, and another to allow port 3389 with priority 1000.

C.Create a single firewall rule to allow port 22 with priority 1000.

D.Create a single firewall rule to allow port 3389 with priority 1000.

Question 40

You are planning to use Terraform to deploy the Google Cloud infrastructure for your company The design must meet the following requirements
* Each Google Cloud project must represent an Internal project that your team Will work on
* After an internal project is finished, the infrastructure must be deleted
* Each Internal project must have Its own Google Cloud project owner to manage the Google Cloud resources-
* You have 10-100 projects deployed at a time,
While you are writing the Terraform code, you need to ensure that the deployment IS Simple, and the code IS reusable With centralized management What should you doo

A.Create a Single pt0Ject and additional VPCs for each Internal project

B.Create a Single Project and Single VPC for each internal project

C.Create a single Shared VPC and attach each Google Cloud project as a service project

D.Create a Shared VPC and service project for each Internal project

Correct Answer: C

The correct answer is C. Create a single Shared VPC and attach each Google Cloud project as a service project.
This answer is based on the following facts:
* A Shared VPC allows you to share one or more VPC networks across multiple Google Cloud projects1.
This simplifies the deployment and management of the network infrastructure, as you only need to create and maintain one VPC network for all your internal projects.
* A Shared VPC consists of a host project that owns the VPC network and one or more service projects that use the VPC network2. You can attach and detach service projects as needed, depending on the lifecycle of your internal projects. You can also delete service projects without affecting the host project or other service projects.
* A Shared VPC allows you to delegate administrative roles to different project owners3. You can grant the Shared VPC Admin role to the owner of the host project, who can manage the VPC network and its subnets. You can also grant the Service Project Admin role to the owners of the service projects, who can manage the Google Cloud resources in their own projects.
* The other options are not correct because:
* Option A is not suitable. Creating a single project and additional VPCs for each internal project will increase the complexity and cost of the network infrastructure. You will need to create and maintain multiple VPC networks, firewall rules, routes, and VPN tunnels. You will also have a limit on the number of VPC networks per project4.
* Option B is not feasible. Creating a single project and single VPC for each internal project will not meet the requirement of having separate project owners for each internal project. You will have only one project owner who can manage all the Google Cloud resources in the same project.
* Option D is not optimal. Creating a Shared VPC and service project for each internal project will not meet the requirement of having a simple and reusable code with centralized management.
You will need to create and maintain multiple Shared VPCs, which will increase the complexity and cost of the network infrastructure. You will also have more Terraform code to write and manage for each Shared VPC.

Other Version: 2391Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 1942Google.Professional-Cloud-Network-Engineer.v2025-05-14.q111; 2130Google.Professional-Cloud-Network-Engineer.v2024-10-28.q109; 2965Google.Professional-Cloud-Network-Engineer.v2023-04-24.q111; 1939Google.Professional-Cloud-Network-Engineer.v2023-01-24.q52; 3021Google.Professional-Cloud-Network-Engineer.v2022-03-12.q83; 102Google.Ipassleader.Professional-Cloud-Network-Engineer.v2021-10-07.by.stephanie.79q.pdf

Latest Upload: 129Databricks.Databricks-Generative-AI-Engineer-Associate.v2026-08-18.q40; 135SAP.C_CR125_2601.v2026-08-17.q28; 179Salesforce.Field-Service-Consultant.v2026-08-17.q134; 150Oracle.1Z0-1170.v2026-08-16.q64; 156Oracle.1Z1-1170.v2026-08-16.q64; 193Juniper.JN0-336.v2026-08-13.q60; 327EMC.NCP-AII.v2026-08-13.q200; 205CIRO.RSE.v2026-08-12.q41; 175CrowdStrike.CCSE-204.v2026-08-12.q50; 162ISQI.CT-GenAI.v2026-08-11.q14

Question 36

Question 37

Question 38

Question 39

Question 40

Download PDF File