What is the purpose of port allocation in Cloud NAT?

To assign a unique port to each VM for inbound connections

To limit the number of VMs that can use the NAT

To reserve ports for internal load balancers

To manage the number of concurrent outbound connections per NAT IP

Your company has a policy that prohibits access to gambling websites. You have deployed Secure Web Proxy and need to enforce this policy. What is the most effective way to configure the Secure Web Proxy policy?

Use a predefined category filter in the Secure Web Proxy policy to block the 'Gambling' category.

Block all traffic from the internal network and then allow specific users.

Block all traffic to IP addresses that are known to host gambling sites.

Create a URL list with the known gambling domains and block traffic to those domains.

What is a key difference between automatic and manual NAT IP assignment for Cloud NAT?

Automatic assignment is permanent, while manual assignment is temporary

Automatic assignment selects IPs from a pool, while manual assignment requires you to specify the IPs

Automatic assignment is only for regional NAT, while manual is for gateway NAT

Automatic assignment uses a single IP for all subnets, while manual assignment allows multiple IPs

What type of rules can be enforced using Secure Web Proxy policies?

Load balancing rules for distributing traffic across VMs

URL filtering and TLS inspection for outbound HTTPS traffic

Network firewall rules for inbound traffic

IP address translation rules for NAT

In a combined Cloud NAT and Secure Web Proxy setup, what is the typical traffic flow for outbound HTTPS traffic?

VM -> Secure Web Proxy -> Cloud NAT -> Internet

VM -> Cloud NAT -> Internet -> Secure Web Proxy

VM -> Internet -> Secure Web Proxy -> Cloud NAT

VM -> Cloud NAT -> Secure Web Proxy -> Internet

Google CloudProfessional Cloud Network Engineer

Domain 6Objective 3

6.3 Configuring and Securing Internet Egress Traffic Using Public Cloud NAT and Secure Web Proxy. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 3)

Part of the Section 6: Configuring, implementing and managing a cloud network security solution (~13% of the exam) domain, which accounts for ~13% of the PROFESSIONAL-CLOUD-NETWORK-ENGINEER exam.

16questions here

4free pages

8concepts

~13%of the exam

Questions 11–15

11foundation · easy
What is the purpose of port allocation in Cloud NAT?
Select an answer first
12application · medium
Your company has a policy that prohibits access to gambling websites. You have deployed Secure Web Proxy and need to enforce this policy. What is the most effective way to configure the Secure Web Proxy policy?
Select an answer first
13foundation · easy
What is a key difference between automatic and manual NAT IP assignment for Cloud NAT?
Select an answer first
14foundation · easy
What type of rules can be enforced using Secure Web Proxy policies?
Select an answer first
15foundation · easy
In a combined Cloud NAT and Secure Web Proxy setup, what is the typical traffic flow for outbound HTTPS traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-NETWORK-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-NETWORK-ENGINEER” is a trademark of its owner, used for identification only.