support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Google
  4. PROFESSIONAL CLOUD NETWORK ENGINEER

Free PROFESSIONAL CLOUD NETWORK ENGINEER Exam Braindumps
Professional Cloud Network Engineer Questions 86–90 (page: 19)

Updated On: 10-Feb-2026
Page 19 of 51
PDF with 316 Questions

You recently deployed Cloud VPN to connect your on-premises data center to Google Cloud. You need to monitor the usage of this VPN and set up alerts in case traffic exceeds the maximum allowed. You need to be able to quickly decide whether to add extra links or move to a Dedicated Interconnect.
What should you do?

  1. In the Network Intelligence Center, check for the number of packet drops on the VPN.
  2. In the Google Cloud Console, use Monitoring Query Language to create a custom alert for bandwidth utilization.
  3. In the Monitoring section of the Google Cloud Console, use the Dashboard section to select a default dashboard for VPN usage.
  4. In the VPN section of the Google Cloud Console, select the VPN under hybrid connectivity, and then select monitoring to display utilization on the dashboard.

Answer(s): B



You have applications running in the us-west1 and us-east1 regions. You want to build a highly available VPN that provides 99.99% availability to connect your applications from your project to the cloud services provided by your partner's project while minimizing the amount of infrastructure required. Your partner's services are also in the us-west1 and us-east1 regions. You want to implement the simplest solution.
What should you do?

  1. Create one Cloud Router and one HA VPN gateway in each region of your VPC and your partner's VPC.
    Connect your VPN gateways to the partner's gateways. Enable global dynamic routing in each VPC.
  2. Create one Cloud Router and one HA VPN gateway in the us-west1 region of your VPC. Create one OpenVPN Access Server in each region of your partner's VPC. Connect your VPN gateway to your partner's servers.
  3. Create one OpenVPN Access Server in each region of your VPC and your partner's VP Connect your servers to the partner's servers.
  4. Create one Cloud Router and one HA VPN gateway in the us-west1 region of your VPC and your partner's VPC. Connect your VPN gateways to the partner's gateways with a pair of tunnels. Enable global dynamic routing in each VPC.

Answer(s): D



You need to create the network infrastructure to deploy a highly available web application in the us-east1 and us-west1 regions. The application runs on Compute Engine instances, and it does not require the use of a database. You want to follow Google-recommended practices.
What should you do?

  1. Create one VPC with one subnet in each region.

    Create a regional network load balancer in each region with a static IP address.

    Enable Cloud CDN on the load balancers.

    Create an A record in Cloud DNS with both IP addresses for the load balancers.
  2. Create one VPC with one subnet in each region.

    Create a global load balancer with a static IP address.

    Enable Cloud CDN and Google Cloud Armor on the load balancer.

    Create an A record using the IP address of the load balancer in Cloud DNS.
  3. Create one VPC in each region, and peer both VPCs.

    Create a global load balancer.

    Enable Cloud CDN on the load balancer.

    Create a CNAME for the load balancer in Cloud DNS.
  4. Create one VPC with one subnet in each region.

    Create an HTTP(S) load balancer with a static IP address.

    Choose the standard tier for the network.

    Enable Cloud CDN on the load balancer.

    Create a CNAME record using the load balancer's IP address in Cloud DNS.

Answer(s): B



You are the network administrator responsible for hybrid connectivity at your organization. Your developer team wants to use Cloud SQL in the us-west1 region in your Shared VPC. You configured a Dedicated Interconnect connection and a Cloud Router in us-west1, and the connectivity between your Shared VPC and on-premises data center is working as expected. You just created the private services access connection required for Cloud SQL using the reserved IP address range and default settings. However, your developers cannot access the Cloud SQL instance from on-premises. You want to resolve the issue.
What should you do?

  1. 1. Modify the VPC Network Peering connection used for Cloud SQL, and enable the import and export of routes.
    2. Create a custom route advertisement in your Cloud Router to advertise the Cloud SQL IP address range.
  2. 1. Change the VPC routing mode to global.
    2. Create a custom route advertisement in your Cloud Router to advertise the Cloud SQL IP address range.
  3. 1. Create an additional Cloud Router in us-west2.
    2. Create a new Border Gateway Protocol (BGP) peering connection to your on-premises data center.
    3. Modify the VPC Network Peering connection used for Cloud SQL, and enable the import and export of routes.
  4. 1. Change the VPC routing mode to global.
    2. Modify the VPC Network Peering connection used for Cloud SQL, and enable the import and export of routes.

Answer(s): A



Your company has separate Virtual Private Cloud (VPC) networks in a single region for two departments: Sales and Finance. The Sales department's VPC network already has connectivity to on-premises locations using HA VPN, and you have confirmed that the subnet ranges do not overlap. You plan to peer both VPC networks to use the same HA tunnels for on-premises connectivity, while providing internet connectivity for the Google Cloud workloads through Cloud NAT. Internet access from the on-premises locations should not flow through Google Cloud. You need to propagate all routes between the Finance department and on-premises locations.
What should you do?

  1. Peer the two VPCs, and use the default configuration for the Cloud Routers.
  2. Peer the two VPCs, and use Cloud Router's custom route advertisements to announce the peered VPC network ranges to the on-premises locations.
  3. Peer the two VPCs. Configure VPC Network Peering to export custom routes from Sales and import custom routes on Finance's VPC network. Use Cloud Router's custom route advertisements to announce a default route to the on-premises locations.
  4. Peer the two VPCs. Configure VPC Network Peering to export custom routes from Sales and import custom routes on Finance's VPC network. Use Cloud Router's custom route advertisements to announce the peered VPC network ranges to the on-premises locations.

Answer(s): D



  PDF
Viewing page 19 of 51
Viewing questions 91 - 95 out of 316 questions


Post your Comments and Discuss Google PROFESSIONAL CLOUD NETWORK ENGINEER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!