2.3 Planning and Implementing Networking Resources ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · easy

   Your company has an on-premises data center with a VPN gateway. You need to connect this data center to your VPC on GCP to allow private communication between your on-premises servers and your GCP VMs. You need a secure, site-to-site connection. What should you do?

   • ACreate a Cloud Interconnect connection and attach it to your VPC.
   • BCreate a VPC Network Peering connection with your on-premises network.
   • CCreate a Cloud VPN gateway, a Cloud Router, and a VPN tunnel. Configure the on-premises VPN gateway to establish the tunnel.
   • DCreate a firewall rule to allow traffic from your on-premises public IP addresses to your VPC.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which Cloud Interconnect option is suitable when an organization cannot establish a direct physical connection and needs to use a service provider?

   • APartner Interconnect
   • BVPC Network Peering
   • CDedicated Interconnect
   • DCloud VPN
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which Network Service Tier is generally more cost-effective for applications that do not require global load balancing and can tolerate routing over the public internet?

   • AEnhanced Tier
   • BBasic Tier
   • CPremium Tier
   • DStandard Tier
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a key attribute of Cloud NGFW policy rules?

   • AThey replace all VPC firewall rules
   • BThey support hierarchical application at the organization, folder, or project level
   • CThey are only used for egress traffic
   • DThey can only be applied to a single VPC
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   You are configuring a Cloud NGFW policy rule. You need to allow traffic from a specific set of VMs that run a batch processing job to reach a specific set of database VMs. The batch VMs and database VMs are in different projects and different VPCs. You want to use the most secure and manageable method to identify the source and destination. What should you use?

   • AUse the IP addresses of the batch VMs as the source and the IP addresses of the database VMs as the destination.
   • BUse the service accounts of the batch VMs as the source and the service accounts of the database VMs as the destination.
   • CUse network tags on the batch VMs as the source and network tags on the database VMs as the destination.
   • DUse a combination of network tags for the source and service accounts for the destination.
   Reveal Solution Discussion Select an answer first