You have provisioned a Partner Interconnect connection to extend connectivity from your on-premises data center to Google Cloud. You need to configure a Cloud Router and create a VLAN attachment to connect to resources inside your VPC. You need to configure an Autonomous System number (ASN) to use with the associated Cloud Router and create the VLAN attachment.
What should you do?

• A.Use a public Google ASN 16550.
• B.Use a 2-byte private ASN 64512-65535.
• C.Use a 4-byte private ASN 4200000000-4294967294.
• D.Use a public Google ASN 15169.

Comment: *

Name: *

Email: *

Verification: *

You have a Cloud Storage bucket in Google Cloud project XYZ. The bucket contains sensitive dat a. You need to design a solution to ensure that only instances belonging to VPCs under project XYZ can access the data stored in this Cloud Storage bucket. What should you do?

• A.Configure Private Service Connect to privately access Cloud Storage from all VPCs under project XYZ.
• B.Configure Private Google Access to privately access the Cloud Storage service using private IP addresses.
• C.Configure a VPC Service Controls perimeter around project XYZ, and include storage.googleapis.com as a restricted service in the service perimeter.
• D.Configure Cloud Storage with projectPrivate Access Control List (ACL) that gives permission to the project team based on their roles.

Comment: *

Name: *

Email: *

Verification: *

Your organization is deploying a single project for 3 separate departments. Two of these departments require network connectivity between each other, but the third department should remain in isolation. Your design should create separate network administrative domains between these departments. You want to minimize operational overhead.
How should you design the topology?

• A.Create 3 separate VPCs, and use Cloud VPN to establish connectivity between the two appropriate VPCs.
• B.Create a Shared VPC Host Project and the respective Service Projects for each of the 3 separate departments.
• C.Create 3 separate VPCs, and use VPC peering to establish connectivity between the two appropriate VPCs.
• D.Create a single project, and deploy specific firewall rules. Use network tags to isolate access between the departments.
  Use Shared VPC to connect to a common VPC network. Resources in those projects can communicate with each other securely and efficiently across project boundaries using internal IPs. You can manage shared network resources, such as subnets, routes, and firewalls, from a central host project, enabling you to apply and enforce consistent network policies across the projects.
  With Shared VPC and IAM controls, you can separate network administration from project administration. This separation helps you implement the principle of least privilege. For example, a centralized network team can administer the network without having any permissions into the participating projects. Similarly, the project admins can manage their project resources without any permissions to manipulate the shared network.

Comment: *

Name: *

Email: *

Verification: *

Your organization uses a hub-and-spoke architecture with critical Compute Engine instances in your Virtual Private Clouds (VPCs). You are responsible for the design of Cloud DNS in Google Cloud. You need to be able to resolve Cloud DNS private zones from your on-premises data center and enable on-premises name resolution from your hub-and-spoke VPC design. What should you do?

• A.Configure a private DNS zone in the hub VPC, and configure DNS forwarding to the on-premises server.
  Configure DNS peering from the spoke VPCs to the hub VPC.
• B.Configure a DNS policy in the hub VPC to allow inbound query forwarding from the spoke VPCs.
  Configure the spoke VPCs with a private zone, and set up DNS peering to the hub VPC.
• C.Configure a DNS policy in the hub VPC, and configure the on-premises DNS as an alternate DNS server.
  Configure the spoke VPCs with a private zone, and set up DNS peering to the hub VPC.
• D.Configure a DNS policy in the spoke VPCs, and configure your on-premises DNS as an alternate DNS server.
  Configure the hub VPC with a private zone, and set up DNS peering to each of the spoke VPCs.

Comment: *

Name: *

Email: *

Verification: *

You create multiple Compute Engine virtual machine instances to be used as TFTP servers.
Which type of load balancer should you use?

• A.HTTP(S) load balancer
• B.Network load balancer
• C.TCP proxy load balancer
• D.SSL proxy load balancer

Comment: *

Name: *

Email: *

Verification: *