Free Access to Google.Professional-Cloud-Network-Engineer.v2026-01-02.q124 with Valid Practice Test (Page 10)

Question 41

Question:
Your organization wants to seamlessly migrate a global external web application from Compute Engine to GKE. You need to deploy a simple, cloud-first solution that exposes both applications and sends 10% of the requests to the new application. What should you do?

A.Configure a global external Application Load Balancer with a Service Extension that points to an application running in a VM, which controls which requests go to each application.
B.Configure a global external Application Load Balancer with weighted traffic splitting.
C.Configure two separate global external Application Load Balancers, and use Cloud DNS geolocation routing policies.
D.Configure a global external Application Load Balancer with weighted request mirroring.

Question 42

You have the networking configuration shown. In the diagram Two VLAN attachments associated With two Dedicated Interconnect connections terminate on the same Cloud Router (mycloudrouter). The Interconnect connections terminate on two separate on-premises routers. You advertise the same prefixes from the Border Gateway Protocol (BOP) sessions associated with each Of the VLAN attachments.
You notice an asymmetric traffic flow between the two Interconnect connections. Which of the following actions should you take to troubleshoot the asymmetric traffic flow?

A.From the Google Cloud console, navigate to the Hybrid Connectivity select the Cloud Router, and view BGP sessions.
B.From the Cloud CLI, run gcloud compute -protect_ID router get-status mycloudrouter --region REGION and review the results.
C.From the Google Cloud console, navigate to Cloud Logging to view VPC Flow Logs and review the results
D.From the Cloud CLI. run gcloud compute routers describe mycloudrouter

Question 43

You need to enable Cloud CDN for all the objects inside a storage bucket. You want to ensure that all the object in the storage bucket can be served by the CDN.
What should you do in the GCP Console?

A.Create a new SSL proxy load balancer, select the storage bucket as a backend, and then enable Cloud CDN on the backend.
B.Create a new cloud storage bucket, and then enable Cloud CDN on it.
C.Create a new HTTP load balancer, select the storage bucket as a backend, enable Cloud CDN on the backend, and make sure each object inside the storage bucket is shared publicly.
D.Create a new TCP load balancer, select the storage bucket as a backend, and then enable Cloud CDN on the backend.

Question 44

You are planning to use Terraform to deploy the Google Cloud infrastructure for your company The design must meet the following requirements
* Each Google Cloud project must represent an Internal project that your team Will work on
* After an internal project is finished, the infrastructure must be deleted
* Each Internal project must have Its own Google Cloud project owner to manage the Google Cloud resources-
* You have 10-100 projects deployed at a time,
While you are writing the Terraform code, you need to ensure that the deployment IS Simple, and the code IS reusable With centralized management What should you doo

A.Create a Single pt0Ject and additional VPCs for each Internal project
B.Create a Single Project and Single VPC for each internal project
C.Create a single Shared VPC and attach each Google Cloud project as a service project
D.Create a Shared VPC and service project for each Internal project

Correct Answer: C

The correct answer is C. Create a single Shared VPC and attach each Google Cloud project as a service project.
This answer is based on the following facts:
* A Shared VPC allows you to share one or more VPC networks across multiple Google Cloud projects1.
This simplifies the deployment and management of the network infrastructure, as you only need to create and maintain one VPC network for all your internal projects.
* A Shared VPC consists of a host project that owns the VPC network and one or more service projects that use the VPC network2. You can attach and detach service projects as needed, depending on the lifecycle of your internal projects. You can also delete service projects without affecting the host project or other service projects.
* A Shared VPC allows you to delegate administrative roles to different project owners3. You can grant the Shared VPC Admin role to the owner of the host project, who can manage the VPC network and its subnets. You can also grant the Service Project Admin role to the owners of the service projects, who can manage the Google Cloud resources in their own projects.
* The other options are not correct because:
* Option A is not suitable. Creating a single project and additional VPCs for each internal project will increase the complexity and cost of the network infrastructure. You will need to create and maintain multiple VPC networks, firewall rules, routes, and VPN tunnels. You will also have a limit on the number of VPC networks per project4.
* Option B is not feasible. Creating a single project and single VPC for each internal project will not meet the requirement of having separate project owners for each internal project. You will have only one project owner who can manage all the Google Cloud resources in the same project.
* Option D is not optimal. Creating a Shared VPC and service project for each internal project will not meet the requirement of having a simple and reusable code with centralized management.
You will need to create and maintain multiple Shared VPCs, which will increase the complexity and cost of the network infrastructure. You will also have more Terraform code to write and manage for each Shared VPC.

Question 45

Your organization wants to deploy HA VPN over Cloud Interconnect to ensure encryption in transit over the Cloud Interconnect connections. You have created a Cloud Router and two encrypted VLAN attachments that have a 5 Gbps capacity and a BGP configuration. The BGP sessions are operational. You need to complete the deployment of the HA VPN over Cloud Interconnect. What should you do?

A.Enable MACsec on Partner Interconnect.
B.Create an HA VPN gateway and associate the gateway with your two encrypted VLAN attachments. Configure the HA VPN Cloud Router, peer VPN gateway resources, and HA VPN tunnels. Use the same Cloud Router used for the Cloud Interconnect tier.
C.Create an HA VPN gateway and associate the gateway with your two encrypted VLAN attachments. Create a new dedicated HA VPN Cloud Router peer VPN gateway resources and HA VPN tunnels.
D.Enable MACsec for Cloud Interconnect on the VLAN attachments.

Question 41

Question 42

Question 43

Question 44

Question 45

Download PDF File