0 of 50 Questions completed
Questions:
You have already completed the quiz before. Hence you can not start it again.
You must sign in or sign up to start the quiz.
You must first complete the following:
Quiz complete. Results are being recorded.
0 of 50 Questions answered correctly
Your time:
Time has elapsed
You have reached 0 of 0 point(s), (0 )
Earned Point(s): 0 of 0 , (0 ) 0 Essay(s) Pending (Possible Point(s): 0 )
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
Current
Review
Answered
Correct
Incorrect
Question 1 of 50
1 point(s)
You have been tasked as an Architect for a growing organization that handles a lot of sensitive user data on GCP to recommend a solution that:
Question 2 of 50
1 point(s)
As a Network Engineer, you must design a secure method for applications running in compute engines to access a cloud SQL database while adhering to the least privilege’s best practice principle. Which of the following solutions do you think would be best for this?
Question 3 of 50
1 point(s)
An organization wishes to use GCP to manage its resources in key departments such as finance, research, technology, and sales. You have been granted access to design a solution that can aid in the separation of duties when assigning permissions to carry out specific tasks while adhering to the principle of least privilege. Which of the following solutions is the most efficient and scalable in this situation?
Question 4 of 50
1 point(s)
Your company is migrating its external-facing applications that are currently running on VMs in their data center to GCP, and the following requirements have been provided:
Question 5 of 50
1 point(s)
An organization wishes to migrate its external-facing applications to GCP, currently running on VMs in its data center. Its users are all in Northern Virginia (us-east4), and you have been given the following requirements as the Network Engineer:
Question 6 of 50
1 point(s)
In GCP, an organization has deployed external-facing applications on a managed instance group behind an HTTP(S) load balancer. User traffic from the Internet has been allowed through the firewall. The instances in the organized instance group continue to recycle.
Question 7 of 50
1 point(s)
An external-facing application is deployed on GKE to maximize the benefits of containerization. With Cloud CDN, there is a need to improve the application’s performance. Which of the following can be used in conjunction with Cloud CDN to bring this content closer to users?
Question 8 of 50
1 point(s)
The design of an application that was previously running on a single GCE instance has evolved to include a new requirement for high availability and low latency performance to end-users. Which of the following solutions best solves this?
Question 9 of 50
1 point(s)
A business wants to build a cloud-native solution on GCP. In order to plan and implement IP addressing in its VPC, the company would need flexibility. They would also like to provide subnets with unique descriptive names. Which of the following do you think is the best option?
Question 10 of 50
1 point(s)
A company is developing a new cloud-native solution on GCP that multiple teams will deliver. The company desires a centralized and simple method of managing networking structure, while different teams work non-networking resources. Within the organization, the various groups would have their GCP Projects. Which of the following do you think is the best option?
Question 11 of 50
1 point(s)
There is a request to design a custom network in GCP with four subnets, each with 50 hosts but with a maximum capacity of 200 hosts. You must select the smallest CIDR block that can accomplish this.
Question 12 of 50
1 point(s)
A company wishes to keep its current internal IP address on its GCE instance to meet certain security obligations requiring a static IP address for a specific application. Which of the following is the least disruptive action to achieve this?
Question 13 of 50
1 point(s)
Which of the following enables GCE instances to access Cloud Storage and BigQuery without using external IP addresses? Choose two options.
Question 14 of 50
1 point(s)
As the Network Engineer for your company, you must connect your local data center to their GCP network. During peak periods, the bandwidth requirement is set at 2.5 Gbps, and dynamic routing is required. Which of the following is the cheapest and has the fastest deployment time?
Question 15 of 50
1 point(s)
You wish to set up a dedicated connection to Google that is free of third-party service providers, can access Cloud SQL via a public IP address, and is able to use Cloud SQL.
Question 16 of 50
1 point(s)
A growing company wishes to outsource the management of its on-premises DNS server to a managed service such as GCP. The company is currently dealing with high-volume DNS requests and high latency for domain lookups from anywhere in the world. Which of the following options, as the firm’s Network Engineer, can assist you in accomplishing this?
Question 17 of 50
1 point(s)
Your company must configure two routes in Active-Passive mode for two VPN connections between GCP and your on-premises networks. Which of the following options, as the firm’s Network Engineer, can assist you in accomplishing this?
Question 18 of 50
1 point(s)
You have set up a VPC network with subnets, and the company has its network. You have been tasked with establishing a hybrid connection between the two networks. Both networks will receive additional subnets in the future. The connectivity must be capable of discovering new subnets and properly routing traffic. Which of the following options, as the firm’s Network Engineer, can assist you in accomplishing this?
Question 19 of 50
1 point(s)
There are several subnets with instances in your company’s VPC. You have been asked to configure the routes so that all internet-bound traffic from the developers’ instances in that VPC is routed to an appliance for checks. All firewall rules have been created and are fully functional. Which of the following options, as the firm’s Network Engineer, can assist you in accomplishing this? (Choose two options)
Question 20 of 50
1 point(s)
You are responsible for designing the networking for your company’s new GKE VPC-native public cluster. You must assign secondary CIDR ranges to the pods and services. Where can you do this in the GCP console? Choose two options.
Question 21 of 50
1 point(s)
As the network engineer for a growing company, you have been tasked with putting in place a network appliance that will handle Intrusion Detection and Prevention (IDS/IPS) between networks. Which of the following options, as the firm’s Network Engineer, can assist you in accomplishing this? (Choose two options)
Question 22 of 50
1 point(s)
As the network engineer for a growing company, you have been tasked with implementing a network appliance that will handle Intrusion Detection and Prevention (IDS/IPS) between networks. The instance necessitates the use of multiple network interfaces. Which of the following options, as the firm’s Network Engineer, can assist you in accomplishing this?
Question 23 of 50
1 point(s)
As the network engineer for your company, the company has a GCP organization with four projects for the various departments. To protect the GCE instances in multiple projects, you must design a network that allows for sharing a network appliance as a DMZ. Which of the following options, as the firm’s Network Engineer, can assist you in accomplishing this?
Question 24 of 50
1 point(s)
You are configuring Cloud NAT for internet-bound traffic for GCE instances in your subnet that do not have an external IP address. Which of the following must be created?
Question 25 of 50
1 point(s)
A network design is required for a company’s VPC-native cluster. The specifications listed below have been provided to you.
Question 26 of 50
1 point(s)
Your team has set up several GCE instances in a GCP VPC. The security team must be able to review logs of all network traffic to and from instances. Which of the following will supply the required logs? Choose two options.
Question 27 of 50
1 point(s)
You work for a GCP company as a project editor. You have been tasked with creating a Shared VPC in your project that will house several Service Projects that will use the resources deployed there, such as the direct interconnect. You are unable to finish creating the Shared VPC. What other permissions do you require?
Question 28 of 50
1 point(s)
You work in a GCP organization as a project manager. You have been tasked with assigning IAM permissions to groups based on their responsibilities. You must grant consent to the group in charge of the Interconnect connections. Which of the following roles would you assign based on the principle of least privilege?
Question 29 of 50
1 point(s)
As a network engineer in your company, you must configure DNS security (DNSSEC) on your Cloud DNS zone for your domain hosted outside of GCP. What are the two steps that must be taken?
Question 30 of 50
1 point(s)
You attempted to set up a VPC peering between two VPC networks in different GCP organizations, but it failed as a network engineer.
Question 31 of 50
1 point(s)
As your company’s network engineer, you have set up an ingress firewall rule for http traffic into all GCE instances hosting a public-facing application with the tag web-server. The logs for all allowed http traffic are visible, but the logs for denied SSH traffic from 0.0.0.0/0 to the instances are not.
Question 32 of 50
1 point(s)
You have been asked to limit communication between pods and services so that you can determine which pods in your GKE cluster are allowed to communicate with one another.
Question 33 of 50
1 point(s)
You are in charge of establishing your company’s interconnect provisioning between its on-premises network and GCP networks. The company requires 5Gbps of bandwidth to meet peak demand, and the company currently does not want to manage the BGP session. Which of the following can be utilized to fulfill this requirement?
Question 34 of 50
1 point(s)
You are in charge of configuring your company’s partner interconnect between the on-premises and GCP networks. The company has chosen a service provider to provide 5Gbps bandwidth to meet peak demand, and the company currently does not want to manage the BGP session.
Question 35 of 50
1 point(s)
As a network engineer in a small company, you are tasked with implementing a low-cost hybrid connectivity solution capable of serving up to 4.5Gbps between GCP and on-premises networks. The GCP VPC will have subnets with resources spread across multiple regions. You must meet the requirements listed below.
Question 36 of 50
1 point(s)
Which network standard enables dynamic route discovery between a GCP and a non-GCP network for private RFC 1918 communications?
Question 37 of 50
1 point(s)
In GCP, you must configure the external load balancer for your firm’s application. Some of the key requirements are pass-through traffic, a single region backend, and maintaining user sessions while ensuring good traffic distribution across instances.
Question 38 of 50
1 point(s)
As the network engineer, you must configure the external layer 7 load balancer for your firm’s application in GCP.
Question 39 of 50
1 point(s)
You are debating the best Network Service Tiers for the company’s global application. There have been instances where developers have used a tier that is not in line with project objectives, which must be avoided.
Question 40 of 50
1 point(s)
You are tasked as a network engineer with automating the repeatability of certain GCP actions, such as the creation of VPCs, Cloud Buckets, and Cloud VPN connections.
Question 41 of 50
1 point(s)
In your GCP project, you have created a custom VPC with three subnets. Which of the following statements is correct? Choose two options.
Question 42 of 50
1 point(s)
A Google group for network administrators has been assigned the Compute Network Admin role in a GCP Project as part of an organization’s IAM management. Which of the following statements is correct? Pick three.
Question 43 of 50
1 point(s)
In a GCP Organization, you are responsible for defining the permissions of a Google Group for network security admins at the folder level. The team must only be able to create and delete firewall rules and manage SSL Certificates and SSL Policies. Which role should you assign to the group based on GCP best practices?
Question 44 of 50
1 point(s)
In your GCP Project, you are creating a new Service Account role with custom permissions. Which of the following statements about Service Accounts is correct? Select two.
Question 45 of 50
1 point(s)
In your GCP Project, you have created a VPC with one subnet. The primary IP CIDR for the subnet is 192.168.0.0/24. How many addresses are available in the Primary IP range?
Question 46 of 50
1 point(s)
A company has a VPC with subnets in three regions: Europe-west1, Europe-north1, and US-central1. GCE instances have been deployed into all three subnets without an external IP address. The necessary firewall rules and routes have been implemented. In us-central-1, a Cloud-NAT resource was created and attached to the VPC. Two subnets’ instances are unable to download updates from the Internet.
Question 47 of 50
1 point(s)
You have been asked to configure Cloud NAT logging to show the successful connections from the VMs to the Internet. Which of the following are the two types of logs sent to Cloud Logging by Cloud NAT? (Choose two options)
Question 48 of 50
1 point(s)
You have been tasked with setting up a GKE Cluster with a shared VPC. Several requirements are listed below:
Question 49 of 50
1 point(s)
You have been tasked with setting up a GKE Cluster in a VPC. Several requirements are listed below:
Question 50 of 50
1 point(s)
You are in charge of configuring GCP’s connectivity with the remote network. You are debating which encryption to use on the VPN tunnels. Which of these encryption methods does Cloud VPN support?
