You are designing a Partner Interconnect hybrid cloud connectivity solution with geo-redundancy across two metropolitan areas. You want to follow Google-recommended practices to set up the following region/metro pairs:
(region 1/metro 1)
(region 2/metro 2)
What should you do?

• A.Create a Cloud Router in region 1 with one VLAN attachment connected to metro1-zone1-x and one VLAN attachment connected to metro1-zone2-x.
  Create a Cloud Router in region 2 with one VLAN attachment connected to metro2-zone1-x and one VLAN attachment to metro2-zone2-x.
• B.Create a Cloud Router in region 1 with one VLAN attachment connected to metro1-zone1-x.
  Create a Cloud Router in region 2 with two VLAN attachments connected to metro2-zone2-x.
• C.Create a Cloud Router in region 1 with two VLAN attachments connected to metro1-zone1-x.
  Create a Cloud Router in region 2 with two VLAN attachments connected to metro1-zone2-x.
• D.Create a Cloud Router in region 1 with one VLAN attachment connected to metro1-zone2-x.
  Create a Cloud Router in region 2 with one VLAN attachment connected to metro2-zone2-x.

Comment: *

Name: *

Email: *

Verification: *

You want to deploy a VPN Gateway to connect your on-premises network to GCP. You are using a non BGP-capable on-premises VPN device. You want to minimize downtime and operational overhead when your network grows. The device supports only IKEv2, and you want to follow Google-recommended practices.
What should you do?

• A.Create a Cloud VPN instance.
  Create a policy-based VPN tunnel per subnet.
  Configure the appropriate local and remote traffic selectors to match your local and remote networks.
  Create the appropriate static routes.
• B.Create a Cloud VPN instance.
  Create a policy-based VPN tunnel.
  Configure the appropriate local and remote traffic selectors to match your local and remote networks.
  Configure the appropriate static routes.
• C.Create a Cloud VPN instance.
  Create a route-based VPN tunnel.
  Configure the appropriate local and remote traffic selectors to match your local and remote networks.
  Configure the appropriate static routes.
• D.Create a Cloud VPN instance.
  Create a route-based VPN tunnel.
  Configure the appropriate local and remote traffic selectors to 0.0.0.0/0.
  Configure the appropriate static routes.

Comment: *

Name: *

Email: *

Verification: *

You are migrating a three-tier application architecture from on-premises to Google Cloud. As a first step in the migration, you want to create a new Virtual Private Cloud (VPC) with an external HTTP(S) load balancer. This load balancer will forward traffic back to the on-premises compute resources that run the presentation tier. You need to stop malicious traffic from entering your VPC and consuming resources at the edge, so you must configure this policy to filter IP addresses and stop cross-site scripting (XSS) attacks. What should you do?

• A.Create a Google Cloud Armor policy, and apply it to a backend service that uses an internet network endpoint group (NEG) backend.
• B.Create a VPC firewall ruleset, and apply it to all instances in unmanaged instance groups.
• C.Create a hierarchical firewall ruleset, and apply it to the VPC's parent organization resource node.
• D.Create a Google Cloud Armor policy, and apply it to a backend service that uses an unmanaged instance group backend.

Comment: *

Name: *

Email: *

Verification: *

You are increasing your usage of Cloud VPN between on-premises and GCP, and you want to support more traffic than a single tunnel can handle. You want to increase the available bandwidth using Cloud VPN.
What should you do?

• A.Add a second Cloud VPN gateway in a different region than the existing VPN gateway. Create a new tunnel on the second Cloud VPN gateway that forwards the same IP range, but points to the existing on-premises VPN gateway IP address.
• B.Create two VPN tunnels on the same Cloud VPN gateway that point to the same destination VPN gateway IP address.
• C.Add a second on-premises VPN gateway with a different public IP address. Create a second tunnel on the existing Cloud VPN gateway that forwards the same IP range, but points at the new on-premises gateway IP.
• D.Double the MTU on your on-premises VPN gateway from 1460 bytes to 2920 bytes.

Comment: *

Name: *

Email: *

Verification: *

Your company has separate Virtual Private Cloud (VPC) networks in a single region for two departments:
Sales and Finance. The Sales department's VPC network already has connectivity to on-premises locations using HA VPN, and you have confirmed that the subnet ranges do not overlap. You plan to peer both VPC networks to use the same HA tunnels for on-premises connectivity, while providing internet connectivity for the Google Cloud workloads through Cloud NAT. Internet access from the on-premises locations should not flow through Google Cloud. You need to propagate all routes between the Finance department and on- premises locations. What should you do?

• A.Peer the two VPCs. Configure VPC Network Peering to export custom routes from Sales and import custom routes on Finance's VPC network. Use Cloud Router's custom route advertisements to announce the peered VPC network ranges to the on-premises locations.
• B.Peer the two VPCs. Configure VPC Network Peering to export custom routes from Sales and import custom routes on Finance's VPC network. Use Cloud Router's custom route advertisements to announce a default route to the on-premises locations.
• C.Peer the two VPCs, and use the default configuration for the Cloud Routers.
• D.Peer the two VPCs, and use Cloud Router's custom route advertisements to announce the peered VPC network ranges to the on-premises locations.

Comment: *

Name: *

Email: *

Verification: *