2.1 Configuring VPCs. Considerations Include:: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which IAM role should be granted to a service project user to allow them to create VM instances in a shared subnet?

   • ACompute Network Admin
   • BCompute Network User
   • CCompute Viewer
   • DCompute Instance Admin
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   You have two VPCs, VPC-A and VPC-B, that are peered. VPC-A has a subnet with a range of 10.0.0.0/16, and VPC-B has a subnet with a range of 10.0.0.0/24. You are experiencing intermittent connectivity issues between instances in the two VPCs. What is the most likely cause?

   • AThe subnet in VPC-B is too small to handle the traffic.
   • BThe firewall rules are not allowing traffic between the VPCs.
   • CThe subnet ranges overlap, causing routing conflicts.
   • DThe peering connection is not active because the routes are not exchanged.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   Your organization wants to enforce a security boundary around a set of Google Cloud services (e.g., Cloud Storage, BigQuery) to prevent data exfiltration to the internet. You have already set up a VPC Service Controls perimeter. What additional configuration is required to ensure that VMs in your VPC can access the services within the perimeter?

   • AAssign external IP addresses to the VMs so they can reach the services.
   • BEnable Private Google Access on the subnets that contain the VMs.
   • CCreate a VPC peering connection to the services VPC.
   • DCreate a Cloud NAT gateway for the VMs to access the services.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A security team wants to restrict access to a set of Google Cloud services so that data cannot be exfiltrated to the internet. Which service should they use to create a security boundary around these services?

   • ACloud Armor
   • BVPC Service Controls
   • CCloud NAT
   • DIdentity-Aware Proxy
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A VM instance without an external IP address needs to access Google APIs, but Private Google Access is not enabled on its subnet. Which solution can provide this access?

   • ACloud Interconnect
   • BVPC Network Peering
   • CCloud NAT
   • DCloud VPN
   Reveal Solution Discussion Select an answer first