You decide to set up Cloud NAT. After completing the configuration, you find that one of your instances is not using the Cloud NAT for outbound NAT.
What is the most likely cause of this problem?

• A.The instance has been configured with multiple interfaces.
• B.An external IP address has been configured on the instance.
• C.You have created static routes that use RFC1918 ranges.
• D.The instance is accessible by a load balancer external IP address.

Comment: *

Name: *

Email: *

Verification: *

You have deployed a new internal application that provides HTTP and TFTP services to on-premises hosts. You want to be able to distribute traffic across multiple Compute Engine instances, but need to ensure that clients are sticky to a particular instance across both services.
Which session affinity should you choose?

• A.Client IP and protocol
• B.Client IP, port and protocol
• C.None
• D.Client IP

Comment: *

Name: *

Email: *

Verification: *

You want to configure a NAT to perform address translation between your on-premises network blocks and GCP.
Which NAT solution should you use?

• A.An instance configured with iptables SNAT rules
• B.An instance configured with iptables DNAT rules
• C.Cloud NAT
• D.An instance with IP forwarding enabled

Comment: *

Name: *

Email: *

Verification: *

Your organization is deploying a single project for 3 separate departments. Two of these departments require network connectivity between each other, but the third department should remain in isolation. Your design should create separate network administrative domains between these departments. You want to minimize operational overhead.
How should you design the topology?

• A.Create a Shared VPC Host Project and the respective Service Projects for each of the 3 separate departments.
• B.Create 3 separate VPCs, and use Cloud VPN to establish connectivity between the two appropriate VPCs.
• C.Create 3 separate VPCs, and use VPC peering to establish connectivity between the two appropriate VPCs.
• D.Create a single project, and deploy specific firewall rules. Use network tags to isolate access between the departments.

Comment: *

Name: *

Email: *

Verification: *

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You believe you have identified a potential malicious actor, but aren't certain you have the correct client IP address. You want to identify this actor while minimizing disruption to your legitimate users.
What should you do?

• A.Create a VPC Firewall rule that denies traffic, enable logging and set enforcement to disabled, and review necessary logs.
• B.Create a VPC Firewall rule that denies traffic, enable logging and set enforcement to enabled, and review necessary logs.
• C.Create a Cloud Armor Policy rule that denies traffic and review necessary logs.
• D.Create a Cloud Armor Policy rule that denies traffic, enable preview mode, and review necessary logs.

Comment: *

Name: *

Email: *

Verification: *