You decide to set up Cloud NAT. After completing the configuration, you find that one of your instances is not using the Cloud NAT for outbound NAT.
What is the most likely cause of this problem?

• A.The instance has been configured with multiple interfaces.
• B.An external IP address has been configured on the instance.
• C.You have created static routes that use RFC1918 ranges.
• D.The instance is accessible by a load balancer external IP address.

Comment: *

Name: *

Email: *

Verification: *

You are migrating to Cloud DNS and want to import your BIND zone file.
Which command should you use?
gcloud dns record-sets import ZONE_FILE --zone MANAGED_ZONE

• A.gcloud dns record-sets import ZONE_FILE --replace-origin-ns --zone
• B.MANAGED_ZONE
  gcloud dns record-sets import ZONE_FILE --zone-file-format --zone MANAGED_ZONE
• C.gcloud dns record-sets import ZONE_FILE --delete-all-existing --zone
• D.MANAGED_ZONE

Comment: *

Name: *

Email: *

Verification: *

Your on-premises data center has 2 routers connected to your Google Cloud environment through a VPN on each router. All applications are working correctly; however, all of the traffic is passing across a single VPN instead of being load-balanced across the 2 connections as desired.
During troubleshooting you find:
* Each on-premises router is configured with a unique ASN.
* Each on-premises router is configured with the same routes and priorities.
* Both on-premises routers are configured with a VPN connected to a single Cloud Router.
* BGP sessions are established between both on-premises routers and the Cloud Router.
* Only 1 of the on-premises router's routes are being added to the routing table.
What is the most likely cause of this problem?

• A.The on-premises routers are configured with the same routes.
• B.A firewall is blocking the traffic across the second VPN connection.
• C.The ASNs being used on the on-premises routers are different.
• D.You do not have a load balancer to load-balance the network traffic.

Comment: *

Name: *

Email: *

Verification: *

You want to apply a new Cloud Armor policy to an application that is deployed in Google Kubernetes Engine (GKE). You want to find out which target to use for your Cloud Armor policy.
Which GKE resource should you use?

• A.GKE Node
• B.GKE Pod
• C.GKE Cluster
• D.GKE Ingress

Comment: *

Name: *

Email: *

Verification: *

https://cloud.google.com/armor/docs/integrating-cloud-armor#with_ingress

Emilio Biello  

Sep 10, 2022

You work for a university that is migrating to GCP.
These are the cloud requirements:
* On-premises connectivity with 10 Gbps
* Lowest latency access to the cloud
* Centralized Networking Administration Team
New departments are asking for on-premises connectivity to their projects. You want to deploy the most cost- efficient interconnect solution for connecting the campus to Google Cloud.
What should you do?

• A.Use standalone projects and deploy the VLAN attachments and Interconnects in each of the individual projects.
• B.Use Shared VPC, and deploy the VLAN attachments in the service projects. Connect the VLAN attachment to the Shared VPC's host project.
• C.Use Shared VPC, and deploy the VLAN attachments and Interconnect in the host project.
• D.Use standalone projects, and deploy the VLAN attachments in the individual projects. Connect the VLAN attachment to the standalone projects' Interconnects.

Comment: *

Name: *

Email: *

Verification: *