4.4 Configuring Network Connectivity Center. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   Your company uses a third-party virtual firewall (router appliance) in Google Cloud to inspect traffic between on-premises networks and VPCs. You need to integrate this firewall with Network Connectivity Center so that all traffic between on-premises and cloud VPCs passes through it. What is the correct way to configure this?

   • ACreate a VLAN attachment for the router appliance and attach it to the hub.
   • BCreate a router appliance spoke and attach it to the hub, then advertise the VPC subnets from the appliance.
   • CCreate a hybrid spoke for the VPC and a separate hybrid spoke for the on-premises network.
   • DAttach the router appliance directly to the VPC and configure static routes on the appliance.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   You have configured a hybrid spoke in Network Connectivity Center for a VPN tunnel to your on-premises network. You need to verify that the on-premises network can reach a specific Google Cloud VM. You have already confirmed that the VPN tunnel is up and that the VM is running. What is the next step to verify end-to-end connectivity?

   • APing the VM's external IP address from the on-premises network.
   • BCheck the effective routes on the VM's subnet to ensure the on-premises subnet is present.
   • CCheck the firewall rules on the VM to ensure ICMP is allowed.
   • DVerify that the VPN tunnel has a static route for the VM's subnet.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a common method to resolve a routing loop in Network Connectivity Center?

   • ADisable route advertisements from the problematic spoke.
   • BChange the VPC network's routing mode.
   • CIncrease the MTU on the VPN tunnels.
   • DAdd more firewall rules to allow the traffic.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   You have a Network Connectivity Center hub with a router appliance spoke and a hybrid spoke for a VPN tunnel. The router appliance is advertising 10.0.0.0/8, and the VPN tunnel is advertising 10.0.0.0/16. Traffic from Google Cloud VMs destined for 10.0.1.5 is being sent to the VPN tunnel. You want traffic to go through the router appliance. What is the most effective solution?

   • AChange the VPN tunnel's BGP attributes to decrease its local preference.
   • BRemove the VPN tunnel's hybrid spoke from the hub.
   • CConfigure the router appliance to advertise 10.0.0.0/16 or a more specific route.
   • DAdd a static route in the VPC for 10.0.1.0/24 with the router appliance as the next hop.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A network engineer is creating a hybrid spoke in Network Connectivity Center to connect an on-premises network to Google Cloud. Which two types of underlying connectivity can be used to create a hybrid spoke?

   • AVPC peering and Cloud CDN
   • BDedicated Interconnect and VPC peering
   • CCloud VPN tunnels and VLAN attachments
   • DCloud Interconnect and Cloud NAT
   Reveal Solution Discussion Select an answer first