Join the discussion
Question 1/95
Your company has a security team that manages firewalls and SSL certificates. It also has a networking team that manages the networking resources. The networking team needs to be able to read firewall rules, but should not be able to create, modify, or delete them.
How should you set up permissions for the networking team?
How should you set up permissions for the networking team?
Correct Answer: D
Add Comments
- Other Question (95q)
- Q1. Your company has a security team that manages firewalls and SSL certificates. It also has ...
- Q2. You are using a 10-Gbps direct peering connection to Google together with the gsutil tool ...
- Q3. You need to configure the Border Gateway Protocol (BGP) session for a VPN tunnel you just ...
- Q4. You are using a third-party next-generation firewall to inspect traffic. You created a cus...
- Q5. Your organization uses a Shared VPC architecture with a host project and three service pro...
- Q6. Your company has provisioned 2000 virtual machines (VMs) in the private subnet of your Vir...
- Q7. Your organization has a hub and spoke architecture with VPC Network Peering, and hybrid co...
- Q8. You are designing the architecture for your organization so that clients can connect to ce...
- Q9. You are disabling DNSSEC for one of your Cloud DNS-managed zones. You removed the DS recor...
- Q10. You are the Organization Admin for your company. One of your engineers is responsible for ...
- Q11. You work for a multinational enterprise that is moving to GCP. These are the cloud require...
- Q12. Your company has defined a resource hierarchy that includes a parent folder with subfolder...
- Q13. You want to create a service in GCP using IPv6. What should you do?...
- Q14. Your organization has Compute Engine instances in us-east1, us-west2, and us-central1. You...
- Q15. You are designing an IP address scheme for new private Google Kubernetes Engine (GKE) clus...
- Q16. You are troubleshooting connectivity issues between Google Cloud and a public SaaS provide...
- Q17. You have several VMs across multiple VPCs in your cloud environment that require access to...
- Q18. Your organization recently created a sandbox environment for a new cloud deployment. To ha...
- Q19. Your organization has a new security policy that requires you to monitor all egress traffi...
- Q20. Your company's current network architecture has two VPCs that are connected by a dual-NIC ...
- Q21. You have an application that is running in a managed instance group. Your development team...
- Q22. In your Google Cloud organization, you have two folders: Dev and Prod. You want a scalable...
- Q23. You have configured Cloud CDN using HTTP(S) load balancing as the origin for cacheable con...
- Q24. You recently noticed a recurring daily spike in network usage in your Google Cloud project...
- Q25. You have the following Shared VPC design VPC Flow Logs is configured for Subnet-1 In the h...
- Q26. You are responsible for enabling Private Google Access for the virtual machine (VM) instan...
- Q27. You need to ensure your personal SSH key works on every instance in your project. You want...
- Q28. Your company has 10 separate Virtual Private Cloud (VPC) networks, with one VPC per projec...
- Q29. You want to configure load balancing for an internet-facing, standard voice-over-IP (VOIP)...
- Q30. You have applications running in the us-west1 and us-east1 regions. You want to build a hi...
- Q31. You have a storage bucket that contains the following objects: - folder-a/image-a-1.jpg - ...
- Q32. Your company recently migrated to Google Cloud in a Single region. You configured separate...
- Q33. Your organization's security policy requires that all internet-bound traffic return to you...
- Q34. You are using the gcloud command line tool to create a new custom role in a project by cop...
- Q35. You created a new VPC network named Dev with a single subnet. You added a firewall rule fo...
- Q36. Your organization wants to set up hybrid connectivity with VLAN attachments that terminate...
- Q37. You are designing a hybrid cloud environment. Your Google Cloud environment is interconnec...
- Q38. You recently deployed Cloud VPN to connect your on-premises data center to Google Cloud. Y...
- Q39. You have configured a service on Google Cloud that connects to an on-premises service via ...
- Q40. Your company's on-premises network is connected to a VPC using a Cloud VPN tunnel. You hav...
- Q41. You have two Google Cloud projects in a perimeter to prevent data exfiltration. You need t...
- Q42. You configured a single IPSec Cloud VPN tunnel for your organization to a third-party cust...
- Q43. Your organization has approximately 100 teams that need to manage their own environments. ...
- Q44. You have recently been put in charge of managing identity and access management for your o...
- Q45. There are two established Partner Interconnect connections between your on-premises networ...
- Q46. You are designing an IP address scheme for new private Google Kubernetes Engine (GKE) clus...
- Q47. Your organization has approximately 100 teams that need to manage their own environments. ...
- Q48. You are maintaining a Shared VPC in a host project. Several departments within your compan...
- Q49. You have an application hosted on a Compute Engine virtual machine instance that cannot co...
- Q50. You are designing a new application that has backends internally exposed on port 800. The ...
- Q51. You are designing the network architecture for your organization. Your organization has th...
- Q52. You have a storage bucket that contains two objects. Cloud CDN is enabled on the bucket, a...
- Q53. You recently deployed your application in Google Cloud. You need to verify your Google Clo...
- Q54. You need to configure a Google Kubernetes Engine (GKE) cluster. The initial deployment sho...
- Q55. You are creating an instance group and need to create a new health check for HTTP(s) load ...
- Q56. You are the network administrator responsible for hybrid connectivity at your organization...
- Q57. Recently, your networking team enabled Cloud CDN for one of the external-facing services t...
- Q58. You have enabled HTTP(S) load balancing for your application, and your application develop...
- Q59. In order to provide subnet level isolation, you want to force instance-A in one subnet to ...
- Q60. You work for a university that is migrating to GCP. These are the cloud requirements: * On...
- Q61. Your organization has a single project that contains multiple Virtual Private Clouds (VPCs...
- Q62. You need to create the technical architecture for hybrid connectivity from your data cente...
- Q63. You need to create the network infrastructure to deploy a highly available web application...
- Q64. You are configuring a new instance of Cloud Router in your Organization's Google Cloud env...
- Q65. You have an HA VPN connection with two tunnels running in active/passive mode between your...
- Q66. You are designing a hub-and-spoke network architecture for your company's cloud-based envi...
- Q67. You want to use Cloud Interconnect to connect your on-premises network to a GCP VPC. You c...
- Q68. Your organization is implementing a new security policy to control how firewall rules are ...
- Q69. You have just deployed your infrastructure on Google Cloud. You now need to configure the ...
- Q70. Your frontend application VMs and your backend database VMs are all deployed in the same V...
- Q71. Your company has a single Virtual Private Cloud (VPC) network deployed in Google Cloud wit...
- Q72. You built a web application with several containerized microservices. You want to run thos...
- Q73. Your team deployed two applications in GKE that are exposed through an external Applicatio...
- Q74. You have the networking configuration shown in the diagram. A pair of redundant Dedicated ...
- Q75. Your team is developing an application that will be used by consumers all over the world. ...
- Q76. You are troubleshooting connectivity issues between Google Cloud and a public SaaS provide...
- Q77. You need to enable Private Google Access for some subnets within your Virtual Private Clou...
- Q78. After a network change window one of your company's applications stops working. The applic...
- Q79. You want to establish a dedicated connection to Google that can access Cloud SQL via a pub...
- Q80. You want Cloud CDN to serve the https://www.example.com/images/spacetime.png static image ...
- Q81. You are in the early stages of planning a migration to GCP. You want to test the functiona...
- Q82. You want to deploy a VPN Gateway to connect your on-premises network to GCP. You are using...
- Q83. In your company, two departments with separate GCP projects (code-dev and data-dev) in the...
- Q84. All the instances in your project are configured with the custom metadata enable-oslogin v...
- Q85. You have the networking configuration shown. In the diagram Two VLAN attachments associate...
- Q86. Your organization is deploying a mission-critical application with components in different...
- Q87. Your company's logo is published as an image file across multiple websites that are hosted...
- Q88. You have created an HTTP(S) load balanced service. You need to verify that your backend in...
- Q89. Your organization's security team recently discovered that there is a high risk of malicio...
- Q90. You are configuring the final elements of a migration effort where resources have been mov...
- Q91. Your organization has a Google Cloud Virtual Private Cloud (VPC) with subnets in us-east1,...
- Q92. Your company's web server administrator is migrating on-premises backend servers for an ap...
- Q93. You ate planning to use Terraform to deploy the Google Cloud infrastructure for your compa...
- Q94. You have an application running on Compute Engine that uses BigQuery to generate some resu...
- Q95. You have provisioned a Partner Interconnect connection to extend connectivity from your on...
[×]
Download PDF File
Enter your email address to download Google.Professional-Cloud-Network-Engineer.v2025-08-18.q95.pdf