Your company has a Virtual Private Cloud (VPC) with two Dedicated Interconnect connections in two different regions: us-west1 and us-east1. Each Dedicated Interconnect connection is attached to a Cloud Router in its respective region by a VLAN attachment. You need to configure a high availability failover path. By default, all ingress traffic from the on-premises environment should flow to the VPC using the us-west1 connection. If us-west1 is unavailable, you want traffic to be rerouted to us-east1. How should you configure the multi-exit discriminator (MED) values to enable this failover path?

• A.Use regional routing. Set the us-east1 Cloud Router to a base priority of 1000, and set the us-west1 Cloud Router to a base priority of 1
• B.Use regional routing. Set the us-east1 Cloud Router to a base priority of 100, and set the us-west1 Cloud Router to a base priority of 1
• C.Use global routing. Set the us-east1 Cloud Router to a base priority of 100, and set the us-west1 Cloud Router to a base priority of 1
• D.Use global routing. Set the us-east1 Cloud Router to a base priority of 1000, and set the us-west1 Cloud Router to a base priority of 1

Comment: *

Name: *

Email: *

Verification: *

You are deploying a global external TCP load balancing solution and want to preserve the source IP address of the original layer 3 payload.
Which type of load balancer should you use?

• A.HTTP(S) load balancer
• B.Network load balancer
• C.Internal load balancer
• D.TCP/SSL proxy load balancer

Comment: *

Name: *

Email: *

Verification: *

Your company just completed the acquisition of Altostrat (a current GCP customer). Each company has a separate organization in GCP and has implemented a custom DNS solution. Each organization will retain its current domain and host names until after a full transition and architectural review is done in one year. These are the assumptions for both GCP environments.
* Each organization has enabled full connectivity between all of its projects by using Shared VPC.
* Both organizations strictly use the 10.0.0.0/8 address space for their instances, except for bastion hosts (for accessing the instances) and load balancers for serving web traffic.
* There are no prefix overlaps between the two organizations.
* Both organizations already have firewall rules that allow all inbound and outbound traffic from the 10.0.0.0/8 address space.
* Neither organization has Interconnects to their on-premises environment.
You want to integrate networking and DNS infrastructure of both organizations as quickly as possible and with minimal downtime.
Which two steps should you take? (Choose two.)

• A.Provision Cloud Interconnect to connect both organizations together.
• B.Set up some variant of DNS forwarding and zone transfers in each organization.
• C.Connect VPCs in both organizations using Cloud VPN together with Cloud Router.
• D.Use Cloud DNS to create A records of all VMs and resources across all projects in both organizations.
• E.Create a third organization with a new host project, and attach all projects from your company and Altostrat to it using shared VPC.

Comment: *

Name: *

Email: *

Verification: *

You have an HA VPN connection with two tunnels running in active/passive mode between your Virtual Private Cloud (VPC) and on-premises network. Traffic over the connection has recently increased from 1 gigabit per second (Gbps) to 4 Gbps, and you notice that packets are being dropped. You need to configure your VPN connection to Google Cloud to support 4 Gbps. What should you do?

• A.Configure a second set of active/passive VPN tunnels.
• B.Configure the maximum transmission unit (MTU) to its highest supported value.
• C.Configure a second Cloud Router to scale bandwidth in and out of the VPC.
• D.Configure the remote autonomous system number (ASN) to 4096.

Comment: *

Name: *

Email: *

Verification: *

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a traffic-scrubbing service and want to restrict your origin to allow connections only from the traffic-scrubbing service.
What should you do?

• A.Create a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service.
• B.Create a VPC Firewall rule that blocks all traffic except for the traffic-scrubbing service.
• C.Create a VPC Service Control Perimeter that blocks all traffic except for the traffic-scrubbing service.
• D.Create IPTables firewall rules that block all traffic except for the traffic-scrubbing service.

Comment: *

Name: *

Email: *

Verification: *