You have a web application that is currently hosted in the us-central1 region. Users experience high latency when traveling in Asia. You've configured a network load balancer, but users have not experienced a performance improvement. You want to decrease the latency.
What should you do?

• A.Configure a policy-based route rule to prioritize the traffic.
• B.Configure an HTTP load balancer, and direct the traffic to it.
• C.Configure Dynamic Routing for the subnet hosting the application.
• D.Configure the TTL for the DNS zone to decrease the time between updates.

Comment: *

Name: *

Email: *

Verification: *

You created a new VPC for your development team. You want to allow access to the resources in this VPC via SSH only.
How should you configure your firewall rules?

• A.Create two firewall rules: one to block all traffic with priority 0, and another to allow port 22 with priority 1000.
• B.Create two firewall rules: one to block all traffic with priority 65536, and another to allow port 3389 with priority 1000.
• C.Create a single firewall rule to allow port 22 with priority 1000.
• D.Create a single firewall rule to allow port 3389 with priority 1000.

Comment: *

Name: *

Email: *

Verification: *

In order to provide subnet level isolation, you want to force instance-A in one subnet to route through a security appliance, called instance-B, in another subnet.
What should you do?

• A.Create a more specific route than the system-generated subnet route, pointing the next hop to instance-B with no tag.
• B.Create a more specific route than the system-generated subnet route, pointing the next hop to instance-B with a tag applied to instance-A.
• C.Delete the system-generated subnet route and create a specific route to instance-B with a tag applied to instance-A.
• D.Move instance-B to another VPC and, using multi-NIC, connect instance-B's interface to instance-A's network. Configure the appropriate routes to force traffic through to instance-A.

Comment: *

Name: *

Email: *

Verification: *

You are creating a new application and require access to Cloud SQL from VPC instances without public IP addresses.
Which two actions should you take? (Choose two.)

• A.Activate the Service Networking API in your project.
• B.Activate the Cloud Datastore API in your project.
• C.Create a private connection to a service producer.
• D.Create a custom static route to allow the traffic to reach the Cloud SQL API.
• E.Enable Private Google Access.

Comment: *

Name: *

Email: *

Verification: *

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a traffic-scrubbing service and want to restrict your origin to allow connections only from the traffic-scrubbing service.
What should you do?

• A.Create a VPC Service Control Perimeter that blocks all traffic except for the traffic-scrubbing service.
• B.Create a VPC Firewall rule that blocks all traffic except for the traffic-scrubbing service.
• C.Create IPTables firewall rules that block all traffic except for the traffic-scrubbing service.
• D.Create a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service.

Comment: *

Name: *

Email: *

Verification: *