2.3 Planning and Implementing Networking Resources ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   Your organization uses a Shared VPC to centralize network management. A new project needs to be attached as a service project. The application team in the service project needs to create their own firewall rules for their VMs. What is the minimal IAM role you should grant the application team on the host project?

   • ACompute Viewer (roles/compute.viewer)
   • BCompute Instance Admin (roles/compute.instanceAdmin)
   • CCompute Network Admin (roles/compute.networkAdmin)
   • DCompute Security Admin (roles/compute.securityAdmin)
   Reveal Solution Discussion Select an answer first
2. 27application · easy

   You are deploying a public-facing web application that uses HTTP/HTTPS. You need to distribute traffic across a managed instance group of web servers. You also need to support SSL termination, URL-based routing, and health checks. Which load balancer should you use?

   • AInternal TCP/UDP Load Balancer
   • BExternal TCP/UDP Network Load Balancer
   • CExternal HTTP(S) Load Balancer
   • DInternal HTTP(S) Load Balancer
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which identity can be used as a source or target in a Cloud NGFW policy rule to match traffic from or to VM instances?

   • AOrganization ID
   • BBilling account
   • CService account
   • DUser account
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a key characteristic of VPC Network Peering?

   • AIt requires a VPN tunnel between the two VPCs
   • BIt requires the VPCs to be in the same project
   • CIt uses internal IP addresses for communication
   • DIt allows transitive peering between VPCs
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   You have deployed an External HTTP(S) Load Balancer in front of a managed instance group. You notice that some instances are being sent traffic even though they are unhealthy. You need to ensure that unhealthy instances do not receive traffic. What should you do?

   • AEnsure the health check is properly configured and that the backend service is using the correct health check.
   • BIncrease the capacity of the instance group to handle the extra traffic.
   • CConfigure the health check to use a more aggressive check interval and a lower unhealthy threshold.
   • DManually remove the unhealthy instances from the instance group.
   Reveal Solution Discussion Select an answer first