A company is migrating their on-premises workloads to Google Cloud. They have a large IP address space (10.0.0.0/8) that they want to use in the cloud to avoid renumbering their applications. They also need to connect back to their on-premises network via Cloud VPN. What IP addressing strategy should they use?

Use the 10.0.0.0/8 range for the VPC subnets and configure the VPN to route overlapping ranges.

Use the 10.0.0.0/8 range for the VPC and rely on Cloud NAT to translate traffic to the on-premises network.

Use a privately used public IP (PUPI) range for the VPC subnets and configure the VPN to route to on-premises.

Use a new non-overlapping RFC 1918 range for the VPC and use Private NAT to translate traffic to the on-premises range.

A company wants to insert a third-party firewall NVA to inspect all traffic between their application subnets and the internet. They have a VPC with a management subnet and an application subnet. They want to force all egress traffic from the application subnet to go through the NVA. What should they configure?

An internal load balancer in front of the NVA and route traffic to it.

A policy-based route that matches traffic from the application subnet and sends it to the NVA.

A static route in the application subnet with a next hop of the NVA's internal IP address.

A Cloud NAT gateway in the application subnet and route traffic to it.

Google CloudProfessional Cloud Network Engineer

Domain 1Objective 2

1.2 Designing VPC Networks. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 1)

Part of the Section 1: Designing and planning a Google Cloud VPC network (~21% of the exam) domain, which accounts for ~21% of the PROFESSIONAL-CLOUD-NETWORK-ENGINEER exam.

23questions here

5free pages

6concepts

~21%of the exam

Questions 1–5

1application · medium
A company has a VPC network with a private subnet that hosts backend services. They want to allow a third-party SaaS provider to access these services without exposing them to the internet. The SaaS provider is not in the same VPC. What should they use?
Select an answer first
2application · medium
A company is migrating their on-premises workloads to Google Cloud. They have a large IP address space (10.0.0.0/8) that they want to use in the cloud to avoid renumbering their applications. They also need to connect back to their on-premises network via Cloud VPN. What IP addressing strategy should they use?
Select an answer first
3application · medium
A company wants to insert a third-party firewall NVA to inspect all traffic between their application subnets and the internet. They have a VPC with a management subnet and an application subnet. They want to force all egress traffic from the application subnet to go through the NVA. What should they configure?
Select an answer first
4foundation · easy
A company needs to deploy resources in multiple regions and wants them to be able to communicate using internal IP addresses without any inter-region peering or VPN. What type of VPC network should be used?
Select an answer first
5foundation · easy
A network engineer wants to increase network throughput for a VPC by allowing larger packets to be sent without fragmentation. What is the maximum MTU size that can be set for a Google Cloud VPC network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-NETWORK-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-NETWORK-ENGINEER” is a trademark of its owner, used for identification only.

1.2 Designing VPC Networks. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 1)

Questions 1–5

A company has a VPC network with a private subnet that hosts backend services. They want to allow a third-party SaaS provider to access these services without exposing them to the internet. The SaaS provider is not in the same VPC. What should they use?

A company needs to deploy resources in multiple regions and wants them to be able to communicate using internal IP addresses without any inter-region peering or VPN. What type of VPC network should be used?

A network engineer wants to increase network throughput for a VPC by allowing larger packets to be sent without fragmentation. What is the maximum MTU size that can be set for a Google Cloud VPC network?

Keep studying — Section 1: Designing and planning a Google Cloud VPC network (~21% of the exam)