Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

Professional-Cloud-Network-Engineer Professional Cloud Network Engineer

  • Google
  • 5 free sample questions

About this exam

Professional-Cloud-Network-Engineer is the Google exam Professional Cloud Network Engineer. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
Professional-Cloud-Network-Engineer
Vendor
Google
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for Professional-Cloud-Network-Engineer.

Question 1

Your company’s on-premises network is connected to a VPC using a Cloud VPN tunnel. You have a static route of 0.0.0.0/0 with the VPN tunnel as its next hop defined in the VPC. All internet bound traffic currently passes through the on-premises network. You configured Cloud NAT to translate the primary IP addresses of Compute Engine instances in one region. Traffic from those instances will now reach the internet directly from their VPC and not from the on-premises network. Traffic from the virtual machines (VMs) is not translating addresses as expected. What should you do?

  1. Option A:

    Lower the TCP Established Connection Idle Timeout for the NAT gateway.

  2. Option B:

    Add firewall rules that allow ingress and egress of the external NAT IP address, have a target tag that is on the Compute Engine instances, and have a priority value higher than the priority value of the default route to the VPN gateway.

  3. Option C:

    Add a default static route to the VPC with the default internet gateway as the next hop, the network tag associated with the Compute Engine instances, and a higher priority than the priority of the default route to the VPN tunnel.

  4. Option D:

    Increase the default min-ports-per-vm setting for the Cloud NAT gateway.

Show answer and explanation

Correct answer: A

Question 2

You need to ensure your personal SSH key works on every instance in your project. You want to accomplish this as efficiently as possible.

What should you do?

  1. Option A:

    Upload your public ssh key to the project Metadata.

  2. Option B:

    Upload your public ssh key to each instance Metadata.

  3. Option C:

    Create a custom Google Compute Engine image with your public ssh key embedded.

  4. Option D:

    Use gcloud compute ssh to automatically copy your public ssh key to the instance.

Show answer and explanation

Correct answer: A

Overview By creating and managing SSH keys, you can let users access a Linux instance through third-party tools. An SSH key consists of the following files: A public SSH key file that is applied to instance-level metadata or project-wide metadata. A private SSH key file that the user stores on their local devices. If a user presents their private SSH key, they can use a third-party tool to connect to any instance that is configured with the matching public SSH key file, even if they aren ' t a member of your Google Cloud project. Therefore, you can control which instances a user can access by changing the public SSH key metadata for one or more instances. https://cloud.google.com/compute/docs/instances/adding-removing-ssh-keys#addkey

See all 5 free sample questions