A company has a VPC with a subnet that contains private instances (no external IP addresses). These instances need to access the internet to download software updates. The company also has a Cloud VPN tunnel to their on-premises network. They want to ensure that the instances' internet traffic does not go through the VPN tunnel. What should they configure?

Assign external IP addresses to the instances

Cloud NAT on the subnet to provide outbound internet access

A route to send all traffic through the VPN tunnel

A firewall rule to allow outbound traffic to the internet

When designing a VPC network, what is a key consideration for IP address planning?

Assigning the same subnet in every region

Avoiding overlapping CIDR ranges with connected networks

Using only public IP addresses for all instances

Using the smallest possible CIDR range to save IP addresses

A company has an internal application that is used by employees both in the office and remotely. The application runs on Compute Engine instances in a VPC. They want to distribute traffic across the instances and also allow on-premises employees to access the application through a Cloud VPN tunnel. What should they configure?

A network load balancer with a backend service that includes the instances

An internal HTTP(S) load balancer with a backend service that includes the instances

A Cloud VPN tunnel with a load balancer on the on-premises side

An external HTTP(S) load balancer with a backend service that includes the instances

Google CloudProfessional Cloud Architect

Domain 2Objective 1

2.1 Configuring Network Topologies PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 4)

Part of the Managing and provisioning a cloud solution infrastructure domain, which accounts for ~17.5% of the PROFESSIONAL-CLOUD-ARCHITECT exam. Google Cloud does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–9 in this domain), expect 2–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

12concepts

~17.5%of the exam

12 Concepts in This Objective

Hybrid networking with Cloud VPN
Hybrid networking with Cloud Interconnect
Network Address Translation (NAT) for hybrid environments
Multicloud connectivity options
Google Cloud-to-Google Cloud communication
Firewall rules and network security
Cloud Armor for intrusion protection
Identity-Aware Proxy (IAP) for access control
VPC design principles
Load balancing for internet-facing services
Load balancing for internal services
Access to cloud and cloud-adjacent services

Questions 16–20

16foundation · easy
Which Google Cloud load balancer is designed to distribute HTTP(S) traffic from the internet to backend instances?
Select an answer first
17application · medium
A company has a VPC with a subnet that contains private instances (no external IP addresses). These instances need to access the internet to download software updates. The company also has a Cloud VPN tunnel to their on-premises network. They want to ensure that the instances' internet traffic does not go through the VPN tunnel. What should they configure?
Select an answer first
18foundation · easy
When designing a VPC network, what is a key consideration for IP address planning?
Select an answer first
19application · medium
A company has an internal application that is used by employees both in the office and remotely. The application runs on Compute Engine instances in a VPC. They want to distribute traffic across the instances and also allow on-premises employees to access the application through a Cloud VPN tunnel. What should they configure?
Select an answer first
20foundation · easy
Which Google Cloud service allows you to define security perimeters around Google Cloud resources to prevent data exfiltration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-ARCHITECT” is a trademark of its owner, used for identification only.

2.1 Configuring Network Topologies PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 4)

Questions 16–20

Which Google Cloud load balancer is designed to distribute HTTP(S) traffic from the internet to backend instances?

When designing a VPC network, what is a key consideration for IP address planning?

Which Google Cloud service allows you to define security perimeters around Google Cloud resources to prevent data exfiltration?

Keep studying — Managing and provisioning a cloud solution infrastructure