3.3 Managing Networking Resources ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   You need to provide DNS resolution for a public domain name, example.com, to a public IP address of your web server. What should you create in Cloud DNS?

   • AA public zone with an A record for example.com
   • BA CNAME record in a private zone pointing to the IP address
   • CA PTR record in a public zone for reverse DNS
   • DA private zone with an A record for example.com
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   You have a VPC with a subnet 10.0.1.0/24 in us-central1. You need to deploy additional VMs, but the subnet is out of IP addresses. You have already created a secondary range for pods. What is the most efficient way to add more IP addresses for VMs?

   • AExpand the primary IPv4 range of the subnet to a larger CIDR block.
   • BCreate a new subnet in the same region and move the VMs to it.
   • CUse the secondary range for the new VMs.
   • DCreate a new VPC and migrate all workloads.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   When applying a Cloud NGFW policy to a VPC, what is a key benefit compared to using standard firewall rules?

   • AIt eliminates the need for VPC firewall rules entirely.
   • BIt provides DNS resolution for internal resources.
   • CIt automatically allows all traffic by default.
   • DIt provides intrusion prevention and threat detection capabilities.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   You need to shrink a subnet's primary IPv4 address range from /24 to /25. What must be true before you can complete this change?

   • ANo resources in the subnet may be using IP addresses that fall outside the new smaller range.
   • BThe subnet must have no secondary IP ranges configured.
   • CThe subnet must be in a custom mode VPC.
   • DYou must first delete all routes that point to the subnet.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   You need to create a custom static route in your VPC to direct traffic to an on-premises network via a VPN tunnel. What is a required parameter when creating this route?

   • AThe route's priority, which must be lower than the default route's priority
   • BThe route's tag, which must match the VM's network tag
   • CThe name of the VPN tunnel's peer IP address
   • DThe destination IP range in CIDR notation
   Reveal Solution Discussion Select an answer first