2.1 Configuring VPCs. Considerations Include:: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   You are configuring a Cloud Build private pool for a project that uses a Shared VPC. The private pool workers need to access resources in a specific subnet in the host project. You have created the private pool in the service project. What is the correct way to configure the worker network?

   • ASpecify the host project's VPC network and the subnet in the host project as the worker network.
   • BUse the service project's default VPC and peer it with the host project.
   • CCreate the private pool in the host project instead of the service project.
   • DCreate a new subnet in the service project and use that for the private pool.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   You have two VPC networks, VPC-A and VPC-B, in the same project. You have established VPC Network Peering between them. Instances in VPC-A can ping instances in VPC-B, but they cannot connect to a specific service running on port 8080. What is the most likely cause?

   • AThe peering connection is not active because the routes are not exchanged.
   • BThe firewall rules in VPC-B do not allow ingress on port 8080 from VPC-A's subnet.
   • CThe peering connection is not set up for custom routes.
   • DThe instances in VPC-B do not have a public IP address.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A network engineer wants to apply consistent firewall policies across multiple VPC networks in an organization. Which resource allows them to define firewall rules at the organization or folder level?

   • ACloud Armor policy
   • BNetwork tag
   • CVPC firewall rule
   • DHierarchical firewall policy
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A network engineer wants to connect two VPC networks so that they can exchange traffic using private IP addresses. Which service should they use?

   • ACloud NAT
   • BVPC Network Peering
   • CCloud Interconnect
   • DCloud VPN
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A network engineer wants to allow VM instances in a subnet to access Google APIs without having external IP addresses. Which feature should be enabled on the subnet?

   • AVPC Network Peering
   • BCloud VPN
   • CPrivate Google Access
   • DCloud NAT
   Reveal Solution Discussion Select an answer first