support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Google
  4. PROFESSIONAL CLOUD NETWORK ENGINEER

Free PROFESSIONAL CLOUD NETWORK ENGINEER Exam Braindumps
Professional Cloud Network Engineer Questions 51–55 (page: 12)

Updated On: 10-Feb-2026
Page 12 of 51
PDF with 316 Questions

You have a storage bucket that contains two objects. Cloud CDN is enabled on the bucket, and both objects have been successfully cached. Now you want to make sure that one of the two objects will not be cached anymore, and will always be served to the internet directly from the origin.

What should you do?

  1. Ensure that the object you don't want to be cached anymore is not shared publicly.
  2. Create a new storage bucket, and move the object you don't want to be cached anymore inside it. Then edit the bucket setting and enable the private attribute.
  3. Add an appropriate lifecycle rule on the storage bucket containing the two objects.
  4. Add a Cache-Control entry with value private to the metadata of the object you don't want to be cached anymore. Invalidate all the previously cached copies.

Answer(s): D



Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a traffic-scrubbing service and want to restrict your origin to allow connections only from the traffic-scrubbing service.

What should you do?

  1. Create a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service.
  2. Create a VPC Firewall rule that blocks all traffic except for the traffic-scrubbing service.
  3. Create a VPC Service Controls Perimeter that blocks all traffic except for the traffic-scrubbing service.
  4. Create IPTables firewall rules that block all traffic except for the traffic-scrubbing service.

Answer(s): A



Your software team is developing an on-premises web application that requires direct connectivity to Compute Engine Instances in GCP using the RFC 1918 address space. You want to choose a connectivity solution from your on-premises environment to GCP, given these specifications:

Your ISP is a Google Partner Interconnect provider.

Your on-premises VPN device's internet uplink and downlink speeds are 10 Gbps.

A test VPN connection between your on-premises gateway and GCP is performing at a maximum speed of

500 Mbps due to packet losses.
Most of the data transfer will be from GCP to the on-premises environment.

The application can burst up to 1.5 Gbps during peak transfers over the Interconnect.

Cost and the complexity of the solution should be minimal.

How should you provision the connectivity solution?

  1. Provision a Partner Interconnect through your ISP.
  2. Provision a Dedicated Interconnect instead of a VPN.
  3. Create multiple VPN tunnels to account for the packet losses, and increase bandwidth using ECMP.
  4. Use network compression over your VPN to increase the amount of data you can send over your VPN.

Answer(s): A



Your company has just launched a new critical revenue-generating web application. You deployed the application for scalability using managed instance groups, autoscaling, and a network load balancer as frontend. One day, you notice severe bursty traffic that caused autoscaling to reach the maximum number of instances, and users of your application cannot complete transactions. After an investigation, you think it is a

DDOS attack. You want to quickly restore user access to your application and allow successful transactions while minimizing cost.

Which two steps should you take? (Choose two.)

  1. Use Cloud Armor to blacklist the attacker's IP addresses.
  2. Increase the maximum autoscaling backend to accommodate the severe bursty traffic.
  3. Create a global HTTP(s) load balancer and move your application backend to this load balancer.
  4. Shut down the entire application in GCP for a few hours. The attack will stop when the application is offline.
  5. SSH into the backend compute engine instances, and view the auth logs and syslogs to further understand the nature of the attack.

Answer(s): A,B



You are creating a new application and require access to Cloud SQL from VPC instances without public IP addresses.

Which two actions should you take? (Choose two.)

  1. Activate the Service Networking API in your project.
  2. Activate the Cloud Datastore API in your project.
  3. Create a private connection to a service producer.
  4. Create a custom static route to allow the traffic to reach the Cloud SQL API.
  5. Enable Private Google Access.

Answer(s): C,E



  PDF
Viewing page 12 of 51
Viewing questions 56 - 60 out of 316 questions


Post your Comments and Discuss Google PROFESSIONAL CLOUD NETWORK ENGINEER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!