Free Google Professional-Cloud-Network-Engineer Exam Dumps Questions & Answers

You want to use Cloud Interconnect to connect your on-premises network to a GCP VPC. You cannot meet Google at one of its point-of-presence (POP) locations, and your on-premises router cannot run a Border Gateway Protocol (BGP) configuration.
Which connectivity model should you use?

• A.  Partner Interconnect with a layer 3 partner
• B.  Direct Peering
• C.  Dedicated Interconnect
• D.  Partner Interconnect with a layer 2 partner

You are developing an HTTP API hosted on a Compute Engine virtual machine instance that must be invoked only by multiple clients within the same Virtual Private Cloud (VPC). You want clients to be able to get the IP address of the service. What should you do?

• A.  Reserve a static external IP address and assign it to an HTTP(S) load balancing service's forwarding rule. Clients should use this IP address to connect to the service.
• B.  Reserve a static external IP address and assign it to an HTTP(S) load balancing service's forwarding rule. Then, define an A record in Cloud DNS. Clients should use the name of the A record to connect to the service.
• C.  Ensure that clients use Compute Engine internal DNS by connecting to the instance name with the url
  https://[API_NAME]/[API_VERSION]/.
• D.  Ensure that clients use Compute Engine internal DNS by connecting to the instance name with the url
  https://[INSTANCE_NAME].[ZONE].c.[PROJECT_ID].internal/.

Your company uses Compute Engine instances that are exposed to the public internet. Each compute instance has a single network interface with a single public IP address. You need to block any connection attempt that originates from internet clients with IP addresses that belong to the bgp_asn_toblock BGP ASN. What should you do?

• A.  Q Create a new Cloud Armor backend security policy, and use the -network-src-asns parameter.
• B.  O Create a new firewall policy ingress rule, and use the -network-src-asns parameter.
• C.  Q Create a new Cloud Armor edge security policy, and use the -network-src-asns parameter.
• D.  Q Create a new Cloud Armor network edge security policy, and use the -network-src-asns parameter.

There are two established Partner Interconnect connections between your on-premises network and Google Cloud. The VPC that hosts the Partner Interconnect connections is named "vpc-a" and contains three VPC subnets across three regions, Compute Engine instances, and a GKE cluster. Your on-premises users would like to resolve records hosted in a Cloud DNS private zone following Google-recommended practices. You need to implement a solution that allows your on-premises users to resolve records that are hosted in Google Cloud. What should you do?

• A.  Configure a DNS proxy service inside one of the GKE clusters. Expose the DNS proxy service in GKE as an internal load balancer. Configure the on-premises DNS servers to forward queries for the private zone to the IP address of the internal load balancer.
• B.  Associate the private zone to "vpc-a." Create an outbound forwarding policy and associate the policy to
  "vpc-a." Configure the on-premises DNS servers to forward queries for the private zone to the entry point addresses created when the policy was attached to "vpc-a."
• C.  Use custom route advertisements to announce 169.254.169.254 via BGP to the on-premises environment. Configure the on-premises DNS servers to forward DNS requests to 169.254.169.254.
• D.  Associate the private zone to "vpc-a." Create an inbound forwarding policy and associate the policy to
  "vpc-a." Configure the on-premises DNS servers to forward queries for the private zone to the entry point addresses created when the policy was attached to "vpc-a."

You need to centralize the Identity and Access Management permissions and email distribution for the WebServices Team as efficiently as possible.
What should you do?

• A.  Create a Google Group for the WebServices Team.
• B.  Create a new Cloud Identity Domain for the WebServices Team.
• C.  Create a G Suite Domain for the WebServices Team.
• D.  Create a new Custom Role for all members of the WebServices Team.