4.2 Configuring a Site-To-Site IPSec VPN. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which component is essential for a policy-based Classic VPN configuration?

   • ATraffic selectors
   • BStatic routes
   • CCloud Router
   • DBGP sessions
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a route-based Classic VPN, how are routes typically managed when not using Cloud Router?

   • AThey are automatically propagated via BGP.
   • BThey are learned from the on-premises router via IKE.
   • CThey are configured as static routes in the VPC.
   • DThey are defined in the VPN tunnel's traffic selectors.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   When a VPN tunnel is established but traffic is not passing, what is the first thing to check?

   • AThe VPN gateway's external IP address
   • BThe BGP session status
   • CThe shared secret
   • DThe firewall rules in the VPC
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a required step when configuring an HA VPN tunnel in Google Cloud?

   • AConfiguring a custom IPsec policy with specific encryption algorithms
   • BAssigning a static route for the on-premises network
   • CCreating a Cloud Router and configuring BGP sessions
   • DCreating a firewall rule allowing UDP port 500 only
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When connecting two VPCs using HA VPN, what is the role of Cloud Router in each VPC?

   • AIt provides the external IP addresses for the VPN gateway.
   • BIt exchanges routes with the peer Cloud Router using BGP.
   • CIt establishes the IPsec tunnel between the two VPCs.
   • DIt encrypts the traffic before sending it over the tunnel.
   Reveal Solution Discussion Select an answer first