Your VPC has a subnet in us-east1 (10.0.1.0/24) and a subnet in us-west1 (10.0.2.0/24). You have a VPN tunnel to an on-premises network that uses the 192.168.0.0/16 range. You need to ensure traffic from your VPC to 192.168.0.0/16 goes through the VPN tunnel. What should you create?

A Cloud NAT gateway with the on-premises network as the destination.

A firewall rule allowing traffic to 192.168.0.0/16.

A custom static route with destination 192.168.0.0/16 and next hop the VPN tunnel.

A peering route to the on-premises network via VPC peering.

You have a public web application hosted on a Compute Engine VM with a static external IP. You want to use the domain name www.example.com to point to this VM. You have already created a public DNS zone in Cloud DNS. What should you do next?

Create a TXT record in the zone with the name www and the VM's static external IP.

Create a PTR record in the zone with the name www and the VM's static external IP.

Create a CNAME record in the zone with the name www and the VM's hostname.

Create an A record in the zone with the name www and the VM's static external IP.

You need to ensure that a VM instance always uses the same private IP address within its subnet, even after the VM is stopped and recreated. What should you do?

Reserve a static internal IP address in the subnet and assign it to the VM.

Use an ephemeral internal IP address and configure a DHCP reservation.

Create a Cloud NAT gateway and attach it to the VM's subnet.

Assign a static external IP address and use it for internal communication.

When configuring Cloud NAT, what is a key component that you must specify?

The VPC firewall rule that allows traffic from the NAT gateway

The subnet or subnets that the NAT gateway will serve

The external IP address of the NAT gateway, which must be a static IP

The DNS zone that the NAT gateway will use for name resolution

Google CloudAssociate Cloud Engineer

Domain 3Objective 3

3.3 Managing Networking Resources ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 4)

Part of the Ensuring the successful operation of a cloud solution domain, which accounts for ~30% of the ASSOCIATE-CLOUD-ENGINEER exam.

19questions here

4free pages

8concepts

~30%of the exam

Questions 16–19

16application · medium
Your VPC has a subnet in us-east1 (10.0.1.0/24) and a subnet in us-west1 (10.0.2.0/24). You have a VPN tunnel to an on-premises network that uses the 192.168.0.0/16 range. You need to ensure traffic from your VPC to 192.168.0.0/16 goes through the VPN tunnel. What should you create?
Select an answer first
17application · medium
You have a public web application hosted on a Compute Engine VM with a static external IP. You want to use the domain name www.example.com to point to this VM. You have already created a public DNS zone in Cloud DNS. What should you do next?
Select an answer first
18foundation · easy
You need to ensure that a VM instance always uses the same private IP address within its subnet, even after the VM is stopped and recreated. What should you do?
Select an answer first
19foundation · easy
When configuring Cloud NAT, what is a key component that you must specify?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ASSOCIATE-CLOUD-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “ASSOCIATE-CLOUD-ENGINEER” is a trademark of its owner, used for identification only.