You have VM instances in a subnet that do not have external IP addresses. They need to access the internet for updates. What should you configure to enable this outbound internet connectivity?

A custom static route to the internet

A static external IP address assigned to each VM

A VPC firewall rule allowing egress to 0.0.0.0/0

You want to enforce advanced security controls, such as intrusion prevention and threat detection, on traffic within your VPC. What should you use?

Cloud Next-Generation Firewall (NGFW) policies

Your organization requires advanced threat detection and intrusion prevention for traffic entering your VPC. You have already implemented standard VPC firewall rules. You now need to add layer-7 inspection and threat detection capabilities. What should you configure?

A Cloud NGFW policy with intrusion prevention rules and attach it to the VPC.

Additional VPC firewall rules with more specific source IP ranges.

A Cloud DNS zone with DNSSEC enabled to protect against DNS spoofing.

A Cloud NAT gateway with logging enabled for traffic inspection.

You have reserved a static external IP address in your project. To which of the following resources can you assign this static external IP address?

A VM instance's network interface

Google CloudAssociate Cloud Engineer

Domain 3Objective 3

3.3 Managing Networking Resources ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 2)

Part of the Ensuring the successful operation of a cloud solution domain, which accounts for ~30% of the ASSOCIATE-CLOUD-ENGINEER exam.

19questions here

4free pages

8concepts

~30%of the exam

Questions 6–10

6foundation · easy
You have VM instances in a subnet that do not have external IP addresses. They need to access the internet for updates. What should you configure to enable this outbound internet connectivity?
Select an answer first
7foundation · easy
You want to enforce advanced security controls, such as intrusion prevention and threat detection, on traffic within your VPC. What should you use?
Select an answer first
8foundation · easy
You want to resolve internal hostnames for resources within your VPC using Cloud DNS. What type of zone should you create?
Select an answer first
9application · medium
Your organization requires advanced threat detection and intrusion prevention for traffic entering your VPC. You have already implemented standard VPC firewall rules. You now need to add layer-7 inspection and threat detection capabilities. What should you configure?
Select an answer first
10foundation · easy
You have reserved a static external IP address in your project. To which of the following resources can you assign this static external IP address?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ASSOCIATE-CLOUD-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “ASSOCIATE-CLOUD-ENGINEER” is a trademark of its owner, used for identification only.