You want to deploy a VPN Gateway to connect your on-premises network to GCP. You are using a non BGP-capable on-premises VPN device. You want to minimize downtime and operational overhead when your network grows. The device supports only IKEv2, and you want to follow Google-recommended practices.
What should you do?

• A.* Create a Cloud VPN instance.* Create a policy-based VPN tunnel per subnet.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Create the appropriate static routes.
• B.* Create a Cloud VPN instance.* Create a policy-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Configure the appropriate static routes.
• C.* Create a Cloud VPN instance.* Create a route-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Configure the appropriate static routes.
• D.* Create a Cloud VPN instance.* Create a route-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to 0.0.0.0/0.* Configure the appropriate static routes.

Comment: *

Name: *

Email: *

Verification: *

Your company is working with a partner to provide a solution for a customer. Both your company and the partner organization are using GCP. There are applications in the partner's network that need access to some resources in your company's VPC. There is no CIDR overlap between the VPCs.
Which two solutions can you implement to achieve the desired results without compromising the security? (Choose two.)

• A.VPC peering
• B.Shared VPC
• C.Cloud VPN
• D.Dedicated Interconnect
• E.Cloud NAT

Comment: *

Name: *

Email: *

Verification: *

You created a new VPC network named Dev with a single subnet. You added a firewall rule for the network Dev to allow HTTP traffic only and enabled logging. When you try to log in to an instance in the subnet via Remote Desktop Protocol, the login fails. You look for the Firewall rules logs in Stackdriver Logging, but you do not see any entries for blocked traffic. You want to see the logs for blocked traffic.
What should you do?

• A.Check the VPC flow logs for the instance.
• B.Try connecting to the instance via SSH, and check the logs.
• C.Create a new firewall rule to allow traffic from port 22, and enable logs.
• D.Create a new firewall rule with priority 65500 to deny all traffic, and enable logs.

Comment: *

Name: *

Email: *

Verification: *

You need to enable Cloud CDN for all the objects inside a storage bucket. You want to ensure that all the object in the storage bucket can be served by the CDN.
What should you do in the GCP Console?

• A.Create a new cloud storage bucket, and then enable Cloud CDN on it.
• B.Create a new TCP load balancer, select the storage bucket as a backend, and then enable Cloud CDN on the backend.
• C.Create a new SSL proxy load balancer, select the storage bucket as a backend, and then enable Cloud CDN on the backend.
• D.Create a new HTTP load balancer, select the storage bucket as a backend, enable Cloud CDN on the backend, and make sure each object inside the storage bucket is shared publicly.

Comment: *

Name: *

Email: *

Verification: *

You need to define an address plan for a future new GKE cluster in your VPC. This will be a VPC native cluster, and the default Pod IP range allocation will be used. You must pre-provision all the needed VPC subnets and their respective IP address ranges before cluster creation. The cluster will initially have a single node, but it will be scaled to a maximum of three nodes if necessary. You want to allocate the minimum number of Pod IP addresses.
Which subnet mask should you use for the Pod IP address range?

• A./21
• B./22
• C./23
• D./25

Comment: *

Name: *

Email: *

Verification: *