3.3 Managing Networking Resources ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A subnet in your VPC currently uses the primary IPv4 range 10.0.0.0/24. You need to expand the subnet to accommodate more instances. What is a prerequisite for expanding the subnet's primary IPv4 address range?

   • AThe subnet must be in auto mode VPC, as custom mode VPCs do not allow range changes.
   • BThe new range must not overlap with any other subnet's range in the same VPC.
   • CThe subnet must not have any resources currently using IP addresses in the range you plan to add.
   • DYou must first delete all firewall rules that reference the subnet.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   You need to modify an existing VPC firewall rule to change the allowed source IP range. What is the correct way to do this?

   • AChange the direction of the firewall rule to egress.
   • BDelete the firewall rule and create a new one with the same name.
   • CEdit the firewall rule and update the source IP range.
   • DCreate a new firewall rule with a higher priority to override the existing one.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   Your company has a VPC with a subnet in us-central1 that has run out of IP addresses. You need to add more address space to this subnet so you can deploy additional VMs. The subnet currently has no dynamic routes advertising its range, and you have already created a secondary range for pods. What must you do before you can expand the primary IPv4 range?

   • AFirst shrink the secondary range to free up address space, then expand the primary range into that space.
   • BDelete all VMs and other resources currently using IPs from the subnet, then expand the range.
   • CCreate a new VPC and migrate all workloads to it, since Google Cloud does not allow modifying subnet ranges after creation.
   • DEnsure the new range does not overlap with any other subnet or secondary range in the VPC, then edit the subnet to add the new range.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   You want to ensure that a VM instance keeps the same external IP address even after it is stopped and restarted. What should you do?

   • AAssign a static internal IP address to the VM and enable IP forwarding.
   • BUse an ephemeral external IP address and rely on the DHCP lease renewal.
   • CCreate a Cloud NAT gateway and attach it to the VM's subnet.
   • DReserve a static external IP address and assign it to the VM.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   You have a VPC with a subnet 10.0.1.0/24. You have a VPN tunnel to an on-premises network that uses 192.168.0.0/16. You also have a peered VPC that uses 10.0.2.0/24. You need to ensure that traffic from your VPC to 192.168.0.0/16 goes through the VPN tunnel, but traffic to 10.0.2.0/24 goes through the peering connection. You have already created a custom static route for 192.168.0.0/16 via the VPN tunnel. What else do you need to configure?

   • AA firewall rule allowing traffic to 10.0.2.0/24.
   • BNothing, because the peering connection automatically creates routes for the peered VPC's subnets.
   • CA custom static route for 10.0.2.0/24 with next hop the peering connection.
   • DA Cloud NAT gateway for the peered VPC to route traffic.
   Reveal Solution Discussion Select an answer first