Free PROFESSIONAL CLOUD NETWORK ENGINEER Exam Braindumps
Professional Cloud Network Engineer Questions 61–65 (page: 14)

Updated On: 10-Feb-2026

You want to establish a dedicated connection to Google that can access Cloud SQL via a public IP address and that does not require a third-party service provider.

Which connection type should you choose?

  1. Carrier Peering
  2. Direct Peering
  3. Dedicated Interconnect
  4. Partner Interconnect

Answer(s): B


Reference:

https://cloud.google.com/interconnect/docs/how-to/direct-peering



You are configuring a new instance of Cloud Router in your Organization's Google Cloud environment to allow connection across a new Dedicated Interconnect to your data center. Sales, Marketing, and IT each have a service project attached to the Organization's host project.

Where should you create the Cloud Router instance?

  1. VPC network in all projects
  2. VPC network in the IT Project
  3. VPC network in the Host Project
  4. VPC network in the Sales, Marketing, and IT Projects

Answer(s): C


Reference:

https://cloud.google.com/interconnect/docs/how-to/dedicated/using-interconnects-other-projects



You created a new VPC for your development team. You want to allow access to the resources in this VPC via SSH only.

How should you configure your firewall rules?

  1. Create two firewall rules: one to block all traffic with priority 0, and another to allow port 22 with priority 1000.
  2. Create two firewall rules: one to block all traffic with priority 65536, and another to allow port 3389 with priority 1000.
  3. Create a single firewall rule to allow port 22 with priority 1000.
  4. Create a single firewall rule to allow port 3389 with priority 1000.

Answer(s): C


Reference:

https://geekflare.com/gcp-firewall-configuration/



Your on-premises data center has 2 routers connected to GCP through a VPN on each router. All applications are working correctly; however, all of the traffic is passing across a single VPN instead of being load-balanced across the 2 connections as desired.

During troubleshooting you find:

· Each on-premises router is configured with the same ASN.
· Each on-premises router is configured with the same routes and priorities. · Both on-premises routers are configured with a VPN connected to a single Cloud Router. · The VPN logs have no-proposal-chosen lines when the VPNs are connecting. · BGP session is not established between one on-premises router and the Cloud Router.

What is the most likely cause of this problem?

  1. One of the VPN sessions is configured incorrectly.
  2. A firewall is blocking the traffic across the second VPN connection.
  3. You do not have a load balancer to load-balance the network traffic.
  4. BGP sessions are not established between both on-premises routers and the Cloud Router.

Answer(s): A



You need to define an address plan for a future new Google Kubernetes Engine (GKE) cluster in your Virtual Private Cloud (VPC). This will be a VPC-native cluster, and the default Pod IP range allocation will be used. You must pre-provision all the needed VPC subnets and their respective IP address ranges before cluster creation. The cluster will initially have a single node, but it will be scaled to a maximum of three nodes if necessary. You want to allocate the minimum number of Pod IP addresses.

Which subnet mask should you use for the Pod IP address range?

  1. /21
  2. /22
  3. /23
  4. /25

Answer(s): D


Reference:

https://cloud.google.com/kubernetes-engine/docs/concepts/alias- ips#defaults_limits



Viewing page 14 of 51
Viewing questions 66 - 70 out of 316 questions


Post your Comments and Discuss Google PROFESSIONAL CLOUD NETWORK ENGINEER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!