You recently deployed your application in Google Cloud. You need to verify your Google Cloud network configuration before deploying your on-premises workloads. You want to confirm that your Google Cloud network configuration allows traffic to flow from your cloud resources to your on- premises network. This validation should also analyze and diagnose potential failure points in your Google Cloud network configurations without sending any data plane test traffic. What should you do?

• A.Enable Packet Mirroring on your application and send test traffic.
• B.Use Network Intelligence Center's Connectivity Tests.
• C.Use Network Intelligence Center's Network Topology visualizations.
• D.Enable VPC Flow Logs and send test traffic.

Comment: *

Name: *

Email: *

Verification: *

You need to restrict access to your Google Cloud load-balanced application so that only specific IP addresses can connect.
What should you do?

• A.Create a secure perimeter using the Access Context Manager feature of VPC Service Controls and restrict access to the source IP range of the allowed clients and Google health check IP ranges.
• B.Create a secure perimeter using VPC Service Controls, and mark the load balancer as a service restricted to the source IP range of the allowed clients and Google health check IP ranges.
• C.Tag the backend instances "application," and create a firewall rule with target tag "application" and the source IP range of the allowed clients and Google health check IP ranges.
• D.Label the backend instances "application," and create a firewall rule with the target label "application" and the source IP range of the allowed clients and Google health check IP ranges.

Comment: *

Name: *

Email: *

Verification: *

Your company's web server administrator is migrating on-premises backend servers for an application to GCP. Libraries and configurations differ significantly across these backend servers.
The migration to GCP will be lift-and-shift, and all requests to the servers will be served by a single network load balancer frontend. You want to use a GCP-native solution when possible.
How should you deploy this service in GCP?

• A.Create a managed instance group from one of the images of the on-premises servers, and link this instance group to a target pool behind your load balancer.
• B.Create a target pool, add all backend instances to this target pool, and deploy the target pool behind your load balancer.
• C.Deploy a third-party virtual appliance as frontend to these servers that will accommodate the significant differences between these backend servers.
• D.Use GCP's ECMP capability to load-balance traffic to the backend servers by installing multiple equal- priority static routes to the backend servers.

Comment: *

Name: *

Email: *

Verification: *

In your company, two departments with separate GCP projects (code-dev and data-dev) in the same organization need to allow full cross-communication between all of their virtual machines in GCP. Each department has one VPC in its project and wants full control over their network. Neither department intends to recreate its existing computing resources. You want to implement a solution that minimizes cost.
Which two steps should you take? (Choose two.)

• A.Enable firewall rules to allow all ingress traffic from all subnets of project code-dev to all instances in project data-dev, and vice versa.
• B.Enable Shared VPC in one project (e. g., code-dev), and make the second project (e. g., data-dev) a service project.
• C.Create a route in the code-dev project to the destination prefixes in project data-dev and use nexthop as the default gateway, and vice versa.
• D.Connect both projects using Cloud VPN.
• E.Connect the VPCs in project code-dev and data-dev using VPC Network Peering.

Comment: *

Name: *

Email: *

Verification: *

Your company is planning a migration to Google Kubernetes Engine. Your application team informed you that they require a minimum of 60 Pods per node and a maximum of 100 Pods per node Which Pod per node CIDR range should you use?

• A./24
• B./25
• C./26
• D./28

Comment: *

Name: *

Email: *

Verification: *