Google인증 실제 시험문제, Professional-Cloud-Network-Engineer 덤프문제집

문제1
Question:
Your organization has approximately 100 teams that need to manage their own environments. A central team must manage the network. You need to design a landing zone that provides separate projects for each team and ensure the solution can scale. What should you do?

A. Configure a Shared VPC and create a VPC network in the host project.

B. Configure Policy-based Routing for each team.

C. Configure a Shared VPC, and create a VPC network in the service project.

D. Configure VPC Network Peering and peer one of the VPCs to the service project.

정답: A

설명: (ITDumpsKR 회원만 볼 수 있음)

문제2
Your organization has a hub and spoke architecture with VPC Network Peering, and hybrid connectivity is centralized at the hub. The Cloud Router in the hub VPC is advertising subnet routes, but the on-premises router does not appear to be receiving any subnet routes from the VPC spokes. You need to resolve this issue.
What should you do?

A. Create custom learned routes at the Cloud Router in the hub to advertise the subnets of the VPC spokes.

B. Create custom routes at the Cloud Router in the spokes to advertise the subnets of the VPC spokes.

C. Create custom routes at the Cloud Router in the hub to advertise the subnets of the VPC spokes.

D. Create a BGP route policy at the Cloud Router, and ensure the subnets of the VPC spokes are being announced towards the on-premises environment.

정답: D

설명: (ITDumpsKR 회원만 볼 수 있음)

문제3
Question:
You are troubleshooting connectivity issues between Google Cloud and a public SaaS provider. Connectivity between the two environments is through the public internet. Your users are reporting intermittent connection errors when using TCP to connect; however, ICMP tests show no failures. According to users, errors occur around the same time every day. You want to troubleshoot and gather information by using Google Cloud tools that are most likely to provide insights into what is occurring within Google Cloud. What should you do?

A. Enable the Firewall insights API. Set the deny rule insights observation period to one day. Review the insights to assure there are no firewall rules denying traffic.

B. Enable and review Cloud Logging for Cloud Armor. Look for logs with errors matching the destination IP address of the public SaaS provider.

C. Create a Connectivity Test by using TCP, the source IP address of your test VM, and the destination IP address of the public SaaS provider. Review the live data plane analysis and take the next steps based on the test results.

D. Enable and review Cloud Logging on your Cloud NAT gateway. Look for logs with errors matching the destination IP address of the public SaaS provider.

정답: C

설명: (ITDumpsKR 회원만 볼 수 있음)

문제4
You want to configure a NAT to perform address translation between your on-premises network blocks and GCP.
Which NAT solution should you use?

A. Cloud NAT

B. An instance configured with iptables DNAT rules

C. An instance with IP forwarding enabled

D. An instance configured with iptables SNAT rules

정답: A

문제5
You are designing a Partner Interconnect hybrid cloud connectivity solution with geo-redundancy across two metropolitan areas. You want to follow Google-recommended practices to set up the following region/metro pairs:
(region 1/metro 1)
(region 2/metro 2)
What should you do?

A. Create a Cloud Router in region 1 with one VLAN attachment connected to metro1-zone1-x and one VLAN attachment connected to metro1-zone2-x.
Create a Cloud Router in region 2 with one VLAN attachment connected to metro2-zone1-x and one VLAN attachment to metro2-zone2-x.

B. Create a Cloud Router in region 1 with two VLAN attachments connected to metro1-zone1-x.
Create a Cloud Router in region 2 with two VLAN attachments connected to metro1-zone2-x.

C. Create a Cloud Router in region 1 with one VLAN attachment connected to metro1-zone2-x.
Create a Cloud Router in region 2 with one VLAN attachment connected to metro2-zone2-x.

D. Create a Cloud Router in region 1 with one VLAN attachment connected to metro1-zone1-x.
Create a Cloud Router in region 2 with two VLAN attachments connected to metro2-zone2-x.

정답: D

문제6
Your on-premises data center has 2 routers connected to your GCP through a VPN on each router. All applications are working correctly; however, all of the traffic is passing across a single VPN instead of being load-balanced across the 2 connections as desired.
During troubleshooting you find:
*Each on-premises router is configured with the same ASN.
*Each on-premises router is configured with the same routes and priorities.
*Both on-premises routers are configured with a VPN connected to a single Cloud Router.
*The VPN logs have no-proposal-chosen lines when the VPNs are connecting.
*BGP session is not established between one on-premises router and the Cloud Router.
What is the most likely cause of this problem?

A. BGP sessions are not established between both on-premises routers and the Cloud Router.

B. One of the VPN sessions is configured incorrectly.

C. You do not have a load balancer to load-balance the network traffic.

D. A firewall is blocking the traffic across the second VPN connection.

정답: B

설명: (ITDumpsKR 회원만 볼 수 있음)

문제7
You are troubleshooting an application in your organization's Google Cloud network that is not functioning as expected. You suspect that packets are getting lost somewhere. The application sends packets intermittently at a low volume from a Compute Engine VM to a destination on your on-premises network through a pair of Cloud Interconnect VLAN attachments. You validated that the Cloud Next Generation Firewall (Cloud NGFW) rules do not have any deny statements blocking egress traffic, and you do not have any explicit allow rules. Following Google-recommended practices, you need to analyze the flow to see if packets are being sent correctly out of the VM to isolate the issue. What should you do?

A. Enable Firewall Rules Logging on your firewall rules and review the logs.

B. Verify the network/attachment/egress_dropped_packet.s_count Cloud Interconnect VLAN attachment metric.

C. Enable VPC Flow Logs on the subnet that the VM is deployed in with sample_rate = 1.0, and run a query in Logs Explorer to analyze the packet flow.

D. Create a packet mirroring policy that is configured with your VM as the source and destined to a collector. Analyze the packet captures.

정답: C

설명: (ITDumpsKR 회원만 볼 수 있음)

문제8
Your organization has resources in two different VPCs, each in different Google Cloud projects, and requires connectivity between the resources in the two VPCs. You have already determined that there is no IP address overlap; however, one VPC uses privately used public IP (PUPI) ranges. You would like to enable connectivity between these resources by using a lower cost and higher performance method. What should you do?

A. Create a VPC Network Peering connection between the two VPCs that allows the export and import of custom routes for public IP addresses. Create the necessary ingress VPC firewall rules that target the specific resources by using service accounts as the source filter.

B. Create a VPC Network Peering connection between the two VPCs that allows the export and import of subnet routes with public IP addresses. Create the necessary ingress VPC firewall rules that target the specific resources by using network tags as the source filter.

C. Create a VPC Network Peering connection between the two VPCs that allows the export and import of subnet routes with public IP addresses. Create the necessary ingress VPC firewall rules that target the specific resources by using IP ranges as the source filter.

D. Create an HA VPN between the two VPCs that includes the PUPI ranges in the custom route advertisements of the Cloud Router. Create the necessary ingress VPC firewall rules that target the specific resources by using IP ranges as the source filter.

정답: C

설명: (ITDumpsKR 회원만 볼 수 있음)

문제9
You have enabled HTTP(S) load balancing for your application, and your application developers have reported that HTTP(S) requests are not being distributed correctly to your Compute Engine Virtual Machine instances. You want to find data about how the request are being distributed.
Which two methods can accomplish this? (Choose two.)

A. In Stackdriver Monitoring, create a new dashboard and track the https/backend_request_count metric for the load balancer.

B. In Stackdriver Monitoring, select Resources > Metrics Explorer and search for https
/request_bytes_count metric.

C. In Stackdriver Error Reporting, look for any unacknowledged errors for the Cloud Load Balancers service.

D. On the Load Balancer details page of the GCP Console, click on the Monitoring tab, select your backend service, and look at the graphs.

E. In Stackdriver Monitoring, select Resources > Google Cloud Load Balancers and review the Key Metrics graphs in the dashboard.

정답: A,D

문제10
You created a new VPC for your development team. You want to allow access to the resources in this VPC via SSH only.
How should you configure your firewall rules?

A. Create a single firewall rule to allow port 3389 with priority 1000.

B. Create a single firewall rule to allow port 22 with priority 1000.

C. Create two firewall rules: one to block all traffic with priority 0, and another to allow port 22 with priority 1000.

D. Create two firewall rules: one to block all traffic with priority 65536, and another to allow port 3389 with priority 1000.

정답: B

설명: (ITDumpsKR 회원만 볼 수 있음)

문제11
You recently deployed Compute Engine instances in regions us-west1 and us-east1 in a Virtual Private Cloud (VPC) with default routing configurations. Your company security policy mandates that virtual machines (VMs) must not have public IP addresses attached to them. You need to allow your instances to fetch updates from the internet while preventing external access. What should you do?

A. Create a firewall rule that allows egress to destination 0.0.0.0/0.

B. Create a Cloud NAT gateway and Cloud Router in both us-west1 and us-east1.

C. Change the instances' network interface external IP address from None to Ephemeral.

D. Create a single global Cloud NAT gateway and global Cloud Router in the VPC.

정답: B

문제12
There are two established Partner Interconnect connections between your on-premises network and Google Cloud. The VPC that hosts the Partner Interconnect connections is named "vpc-a" and contains three VPC subnets across three regions, Compute Engine instances, and a GKE cluster. Your on-premises users would like to resolve records hosted in a Cloud DNS private zone following Google-recommended practices. You need to implement a solution that allows your on-premises users to resolve records that are hosted in Google Cloud. What should you do?

A. Associate the private zone to "vpc-a." Create an outbound forwarding policy and associate the policy to
"vpc-a." Configure the on-premises DNS servers to forward queries for the private zone to the entry point addresses created when the policy was attached to "vpc-a."

B. Configure a DNS proxy service inside one of the GKE clusters. Expose the DNS proxy service in GKE as an internal load balancer. Configure the on-premises DNS servers to forward queries for the private zone to the IP address of the internal load balancer.

C. Use custom route advertisements to announce 169.254.169.254 via BGP to the on-premises environment. Configure the on-premises DNS servers to forward DNS requests to 169.254.169.254.

D. Associate the private zone to "vpc-a." Create an inbound forwarding policy and associate the policy to
"vpc-a." Configure the on-premises DNS servers to forward queries for the private zone to the entry point addresses created when the policy was attached to "vpc-a."

정답: A

설명: (ITDumpsKR 회원만 볼 수 있음)

최신Google Cloud Certified - Professional Cloud Network Engineer - Professional-Cloud-Network-Engineer무료샘플문제

자격증의 중요성:

ITDumpsKR 제품의 가치:

무료샘플 받아보기:

완벽한 서비스 제공:

유용한 링크

인기 시험

우리와 연락하기