2.1 Configuring VPCs. Considerations Include:: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the main benefit of using a Cloud Build private pool compared to the default public pool?

   • APrivate pools do not require a VPC network.
   • BPrivate pools are always faster than public pools.
   • CPrivate pools run builds in your own VPC network, providing more control and security.
   • DPrivate pools are free of charge.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A network engineer needs to enable private connectivity from a VPC network to a Google-managed service (e.g., Cloud SQL). What must be allocated in the VPC network to support this?

   • AA Cloud NAT gateway
   • BA VPC peering connection
   • CA private services access subnet
   • DA public IP address
   Reveal Solution Discussion Select an answer first
4. 23foundation · medium

   Which statement accurately describes how subnet sharing works in a Shared VPC configuration?

   • ASubnets are shared by granting the service project the roles/compute.networkUser role on the host project, which automatically applies to all subnets in the VPC.
   • BSubnet sharing requires the service project to have its own VPC network peered with the host project's VPC, and then the subnet is shared via VPC Network Peering.
   • CTo share a subnet, the host project admin grants the service project's account the roles/compute.networkUser role on that specific subnet, allowing the service project to create resources in it.
   • DA service project can create resources in any subnet of the host project's VPC network, regardless of subnet-level IAM permissions.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary requirement for a VM instance to use Private Google Access?

   • AThe instance must be in a Shared VPC.
   • BThe instance must be in a custom mode VPC.
   • CThe instance must not have an external IP address.
   • DThe instance must have a public DNS record.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   A VPC firewall rule is being created to allow inbound TCP traffic on port 443 from a specific source IP range. Which component of the firewall rule specifies the source of the traffic?

   • ADestination filter
   • BTarget tag
   • CSource filter
   • DPriority
   Reveal Solution Discussion Select an answer first