CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Google
  5. Professional Cloud Network Engineer

Free Professional Cloud Network Engineer Exam Braindumps (page: 14)

Page 13 of 55
PDF with 215 Questions

You have an application that is running in a managed instance group. Your development team has released an updated instance template which contains a new feature which was not heavily tested. You want to minimize impact to users if there is a bug in the new template.

How should you update your instances?

  1. Manually patch some of the instances, and then perform a rolling restart on the instance group.
  2. Using the new instance template, perform a rolling update across all instances in the instance group. Verify the new feature once the rollout completes.
  3. Deploy a new instance group and canary the updated template in that group. Verify the new feature in the new canary instance group, and then update the original instance group.
  4. Perform a canary update by starting a rolling update and specifying a target size for your instances to receive the new template. Verify the new feature on the canary instances, and then roll forward to the rest of the instances.

Answer(s): D

Explanation:

https://cloud.google.com/compute/docs/instance-groups/rolling-out-updates-to-managed-instance- groups#starting_a_canary_update https://cloud.google.com/compute/docs/instance-groups/rolling-out-updates-to-managed-instance- groups



You have deployed a proof-of-concept application by manually placing instances in a single Compute Engine zone. You are now moving the application to production, so you need to increase your application availability and ensure it can autoscale.

How should you provision your instances?

  1. Create a single managed instance group, specify the desired region, and select Multiple zones for the location.
  2. Create a managed instance group for each region, select Single zone for the location, and manually distribute instances across the zones in that region.
  3. Create an unmanaged instance group in a single zone, and then create an HTTP load balancer for the instance group.
  4. Create an unmanaged instance group for each zone, and manually distribute the instances across the desired zones.

Answer(s): A

Explanation:

https://cloud.google.com/compute/docs/instance-groups/creating-groups-of-managed-instances



You have a storage bucket that contains two objects. Cloud CDN is enabled on the bucket, and both objects have been successfully cached. Now you want to make sure that one of the two objects will not be cached anymore, and will always be served to the internet directly from the origin.

What should you do?

  1. Ensure that the object you don't want to be cached anymore is not shared publicly.
  2. Create a new storage bucket, and move the object you don't want to be checked anymore inside it. Then edit the bucket setting and enable the private attribute.
  3. Add an appropriate lifecycle rule on the storage bucket containing the two objects.
  4. Add a Cache-Control entry with value private to the metadata of the object you don't want to be cached anymore. Invalidate all the previously cached copies.

Answer(s): D

Explanation:

https://cloud.google.com/cdn/docs/invalidating-cached-content



Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a traffic-scrubbing service and want to restrict your origin to allow connections only from the traffic- scrubbing service.

What should you do?

  1. Create a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service.
  2. Create a VPC Firewall rule that blocks all traffic except for the traffic-scrubbing service.
  3. Create a VPC Service Control Perimeter that blocks all traffic except for the traffic-scrubbing service.
  4. Create IPTables firewall rules that block all traffic except for the traffic-scrubbing service.

Answer(s): A

Explanation:

Global load balancer will proxy the connection . thus no trace of session origin IP. you should use Cloud Armor to geofence your service.
https://cloud.google.com/load-balancing/docs/https






Post your Comments and Discuss Google Professional Cloud Network Engineer exam with other Community members:

Professional Cloud Network Engineer Discussions & Posts