Free PROFESSIONAL CLOUD NETWORK ENGINEER Exam Braindumps
Professional Cloud Network Engineer Questions 71–75 (page: 16)

Updated On: 10-Feb-2026

You want to implement an IPSec tunnel between your on-premises network and a VPC via Cloud VPN. You need to restrict reachability over the tunnel to specific local subnets, and you do not have a device capable of speaking Border Gateway Protocol (BGP).

Which routing option should you choose?

  1. Dynamic routing using Cloud Router
  2. Route-based routing using default traffic selectors
  3. Policy-based routing using a custom local traffic selector
  4. Policy-based routing using the default local traffic selector

Answer(s): C



You have enabled HTTP(S) load balancing for your application, and your application developers have reported that HTTP(S) requests are not being distributed correctly to your Compute Engine Virtual Machine instances. You want to find data about how the request are being distributed.

Which two methods can accomplish this? (Choose two.)

  1. On the Load Balancer details page of the GCP Console, click on the Monitoring tab, select your backend service, and look at the graphs.
  2. In Stackdriver Error Reporting, look for any unacknowledged errors for the Cloud Load Balancers service.
  3. In Stackdriver Monitoring, select Resources > Metrics Explorer and search for https/request_bytes_count metric.
  4. In Stackdriver Monitoring, select Resources > Google Cloud Load Balancers and review the Key Metrics graphs in the dashboard.
  5. In Stackdriver Monitoring, create a new dashboard and track the https/backend_request_count metric for the load balancer.

Answer(s): A,E



You want to use Partner Interconnect to connect your on-premises network with your VPC. You already have an Interconnect partner.

What should you first?

  1. Log in to your partner's portal and request the VLAN attachment there.
  2. Ask your Interconnect partner to provision a physical connection to Google.
  3. Create a Partner Interconnect type VLAN attachment in the GCP Console and retrieve the pairing key.
  4. Run gcloud compute interconnect attachments partner update <attachment> \ --region <region> --admin-enabled.

Answer(s): C



You need to centralize the Identity and Access Management permissions and email distribution for the WebServices Team as efficiently as possible.

What should you do?

  1. Create a Google Group for the WebServices Team.
  2. Create a G Suite Domain for the WebServices Team.
  3. Create a new Cloud Identity Domain for the WebServices Team.
  4. Create a new Custom Role for all members of the WebServices Team.

Answer(s): A



You are using the gcloud command line tool to create a new custom role in a project by copying a predefined role. You receive this error message:

INVALID_ARGUMENT: Permission resourcemanager.projects.list is not valid

What should you do?

  1. Add the resourcemanager.projects.get permission, and try again.
  2. Try again with a different role with a new name but the same permissions.
  3. Remove the resourcemanager.projects.list permission, and try again.
  4. Add the resourcemanager.projects.setIamPolicy permission, and try again.

Answer(s): C


Reference:

https://cloud.google.com/iam/docs/understanding-custom-roles



Viewing page 16 of 51
Viewing questions 76 - 80 out of 316 questions


Post your Comments and Discuss Google PROFESSIONAL CLOUD NETWORK ENGINEER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!