support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Google
  4. PROFESSIONAL CLOUD NETWORK ENGINEER

Free PROFESSIONAL CLOUD NETWORK ENGINEER Exam Braindumps
Professional Cloud Network Engineer Questions 116–120 (page: 25)

Updated On: 10-Feb-2026
Page 25 of 51
PDF with 316 Questions

You need to configure a Google Kubernetes Engine (GKE) cluster. The initial deployment should have 5 nodes with the potential to scale to 10 nodes. The maximum number of Pods per node is 8. The number of services could grow from 100 to up to 1024. How should you design the IP schema to optimally meet this requirement?

  1. Configure a /28 primary IP address range for the node IP addresses. Configure a (25 secondary IP range for the Pods. Configure a /22 secondary IP range for the Services.
  2. Configure a /28 primary IP address range for the node IP addresses. Configure a /25 secondary IP range for the Pods. Configure a /21 secondary IP range for the Services.
  3. Configure a /28 primary IP address range for the node IP addresses. Configure a /28 secondary IP range for the Pods. Configure a /21 secondary IP range for the Services.
  4. Configure a /28 primary IP address range for the node IP addresses. Configure a /24 secondary IP range for the Pads. Configure a /22 secondary IP range for the Services.

Answer(s): D



You are migrating a three-tier application architecture from on-premises to Google Cloud. As a first step in the migration, you want to create a new Virtual Private Cloud (VPC) with an external HTTP(S) load balancer. This load balancer will forward traffic back to the on-premises compute resources that run the presentation tier. You need to stop malicious traffic from entering your VPC and consuming resources at the edge, so you must configure this policy to filter IP addresses and stop cross-site scripting (XSS) attacks.
What should you do?

  1. Create a Google Cloud Armor policy, and apply it to a backend service that uses an unmanaged instance group backend.
  2. Create a hierarchical firewall ruleset, and apply it to the VPC's parent organization resource node.
  3. Create a Google Cloud Armor policy, and apply it to a backend service that uses an internet network endpoint group (NEG) backend.
  4. Create a VPC firewall ruleset, and apply it to all instances in unmanaged instance groups.

Answer(s): C



You just finished your company's migration to Google Cloud and configured an architecture with 3 Virtual Private Cloud (VPC) networks: one for Sales, one for Finance, and one for Engineering. Every VPC contains over 100 Compute Engine instances, and now developers using instances in the Sales VPC and the Finance VPC require private connectivity between each other. You need to allow communication between Sales and Finance without compromising performance or security.
What should you do?

  1. Configure an HA VPN gateway between the Finance VPC and the Sales VPC.
  2. Configure the instances that require communication between each other with an external IP address.
  3. Create a VPC Network Peering connection between the Finance VPC and the Sales VP
  4. Configure Cloud NAT and a Cloud Router in the Sales and Finance VPCs.

Answer(s): C



You have provisioned a Partner Interconnect connection to extend connectivity from your on-premises data center to Google Cloud. You need to configure a Cloud Router and create a VLAN attachment to connect to resources inside your VPC. You need to configure an Autonomous System number (ASN) to use with the associated Cloud Router and create the VLAN attachment.

What should you do?

  1. Use a 4-byte private ASN 4200000000-4294967294.
  2. Use a 2-byte private ASN 64512-65535.
  3. Use a public Google ASN 15169.
  4. Use a public Google ASN 16550.

Answer(s): D



You are configuring a new application that will be exposed behind an external load balancer with both IPv4 and IPv6 addresses and support TCP pass-through on port 443. You will have backends in two regions: us-west1 and us-east1. You want to serve the content with the lowest possible latency while ensuring high availability and autoscaling.
Which configuration should you use?

  1. Use global SSL Proxy Load Balancing with backends in both regions.
  2. Use global TCP Proxy Load Balancing with backends in both regions.
  3. Use global external HTTP(S) Load Balancing with backends in both regions.
  4. Use Network Load Balancing in both regions, and use DNS-based load balancing to direct traffic to the closest region.

Answer(s): D



  PDF
Viewing page 25 of 51
Viewing questions 121 - 125 out of 316 questions


Post your Comments and Discuss Google PROFESSIONAL CLOUD NETWORK ENGINEER exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!