2.2 Configuring VPC Routing. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   You are using Network Connectivity Center to connect your VPC network to your on-premises network via a VLAN attachment (Interconnect). You have two spokes: one for the VPC and one for the on-premises network. You want to control which routes are exchanged between the VPC and on-premises. Specifically, you want to allow the on-premises network to advertise 10.0.0.0/8, but block 172.16.0.0/12. You also want to allow the VPC to advertise its subnets (10.1.0.0/16) but block any other routes. What should you configure?

   • AUse VPC Network Peering to control route exchange instead of Network Connectivity Center.
   • BCreate static routes in the VPC for 172.16.0.0/12 with next hop to null to block the route.
   • CConfigure the Cloud Router's BGP session to use 'allow' and 'deny' lists for prefixes.
   • DConfigure route policies on the VPC spoke to allow 10.0.0.0/8 and deny 172.16.0.0/12 for inbound routes, and allow 10.1.0.0/16 for outbound routes.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A network engineer wants to route traffic destined for a specific IP range to an internal load balancer (ILB) that fronts a backend service. What should be configured as the next hop for a custom route?

   • AThe IP address of the VPC's default gateway
   • BThe internal IP address of the ILB's forwarding rule
   • CThe IP address of a backend VM
   • DThe external IP address of the ILB
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A network engineer is setting up a Cloud Router to exchange routes with an on-premises router. What must be configured on the Cloud Router to establish BGP sessions?

   • AA custom route with a next hop to the on-premises gateway
   • BA BGP peer with an IP address and ASN for the on-premises router
   • CA firewall rule allowing BGP traffic on TCP port 179
   • DA VPN tunnel and a static route for each on-premises subnet
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of policy-based routing in Google Cloud VPC networks?

   • ATo encrypt traffic between VPC networks
   • BTo route traffic based on the source IP address, destination IP address, protocol, and port
   • CTo create static routes for on-premises networks
   • DTo automatically balance traffic across multiple VPN tunnels
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   A network engineer needs to connect a VPC network to an on-premises environment where the on-premises routes change frequently. Which approach should the engineer choose to ensure that route updates are automatically reflected in the VPC network?

   • ACreate a single default route pointing to the on-premises gateway and rely on the on-premises router to handle all routing decisions.
   • BUse VPC Network Peering to automatically exchange routes with the on-premises network.
   • CUse Cloud Router with BGP to dynamically exchange routes with the on-premises router.
   • DCreate a static route for each on-premises subnet and update it manually whenever the on-premises topology changes.
   Reveal Solution Discussion Select an answer first