A company runs a public-facing web application behind an external HTTP(S) load balancer. They are experiencing a high volume of malicious traffic from specific IP ranges, which is causing performance degradation. They want to block this traffic at the edge, before it reaches their instances. What should they configure?

A Cloud NAT configuration to hide the instances from the malicious IPs

A Cloud Armor policy with a rule to deny traffic from the malicious IP ranges, attached to the load balancer

An IAP policy to restrict access to the load balancer

A firewall rule to deny traffic from the malicious IP ranges

A company has multiple projects, each with its own VPC. They want to centralize network administration and allow instances in different projects to communicate with each other. They also want to avoid creating multiple VPC peering connections. What should they do?

Create a Cloud VPN tunnel between all VPCs

Create a firewall rule to allow traffic between the VPCs

Create VPC peering connections between all VPCs

Create a Shared VPC and attach the projects to it

Google CloudProfessional Cloud Architect

Domain 2Objective 1

2.1 Configuring Network Topologies PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 5)

Part of the Managing and provisioning a cloud solution infrastructure domain, which accounts for ~17.5% of the PROFESSIONAL-CLOUD-ARCHITECT exam. Google Cloud does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–9 in this domain), expect 2–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

12concepts

~17.5%of the exam

12 Concepts in This Objective

Hybrid networking with Cloud VPN
Hybrid networking with Cloud Interconnect
Network Address Translation (NAT) for hybrid environments
Multicloud connectivity options
Google Cloud-to-Google Cloud communication
Firewall rules and network security
Cloud Armor for intrusion protection
Identity-Aware Proxy (IAP) for access control
VPC design principles
Load balancing for internet-facing services
Load balancing for internal services
Access to cloud and cloud-adjacent services

Questions 21–25

21foundation · easy
A company has two VPC networks in the same Google Cloud organization. They want to connect them so that instances can communicate using private IP addresses. Which service should they use?
Select an answer first
22foundation · easy
Which load balancer type is used to distribute non-HTTP TCP traffic from the internet, such as for a database or gaming server?
Select an answer first
23application · medium
A company runs a public-facing web application behind an external HTTP(S) load balancer. They are experiencing a high volume of malicious traffic from specific IP ranges, which is causing performance degradation. They want to block this traffic at the edge, before it reaches their instances. What should they configure?
Select an answer first
24expert · hard
A company has multiple projects, each with its own VPC. They want to centralize network administration and allow instances in different projects to communicate with each other. They also want to avoid creating multiple VPC peering connections. What should they do?
Select an answer first
25foundation · easy
A company runs workloads in both Google Cloud and another cloud provider. They want to connect the two cloud environments securely over the internet. Which option is appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-ARCHITECT” is a trademark of its owner, used for identification only.

2.1 Configuring Network Topologies PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 5)

Questions 21–25

A company has two VPC networks in the same Google Cloud organization. They want to connect them so that instances can communicate using private IP addresses. Which service should they use?

Which load balancer type is used to distribute non-HTTP TCP traffic from the internet, such as for a database or gaming server?

A company has multiple projects, each with its own VPC. They want to centralize network administration and allow instances in different projects to communicate with each other. They also want to avoid creating multiple VPC peering connections. What should they do?

A company runs workloads in both Google Cloud and another cloud provider. They want to connect the two cloud environments securely over the internet. Which option is appropriate?

Keep studying — Managing and provisioning a cloud solution infrastructure