5.2 Maintaining and Troubleshooting Connectivity Issues. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary purpose of Packet Mirroring in Google Cloud?

   • ATo copy traffic from mirrored sources to a collector for deep packet analysis
   • BTo modify firewall rules
   • CTo provide DNS resolution
   • DTo block malicious traffic
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A site-to-site VPN tunnel between your on-premises network and Google Cloud is down. The Cloud VPN tunnel status shows 'Negotiation failure'. You have verified that the on-premises gateway is powered on and has a public IP address. What is the most likely next step to diagnose the issue?

   • AReview VPC Flow Logs for the tunnel's external IP addresses.
   • BCheck the IKE version, pre-shared key, and encryption/authentication algorithms configured on both ends.
   • CVerify that the on-premises gateway is advertising the correct routes via BGP.
   • DRecreate the VPN tunnel with a new pre-shared key.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   A BGP session between a Cloud Router and an on-premises router is not establishing. What is a common cause?

   • AIncorrect firewall rules in the VPC
   • BInsufficient bandwidth on the interconnect
   • CMismatched BGP AS numbers
   • DDNS misconfiguration for the on-premises domain
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   Your team is performing a blue/green deployment of a web application behind an Application Load Balancer. The blue target group is being deregistered while it still has active user sessions. Users report that their requests fail mid-session during the cutover. You need to ensure in-flight requests complete gracefully without changing the deployment strategy. What should you do?

   • ADisable health checks on the blue target group before deregistering it.
   • BSet the blue target group's deregistration delay to zero to speed up the cutover.
   • CIncrease the connection draining timeout on the blue target group before deregistering it.
   • DSwitch the load balancer's listener protocol from HTTP to TCP for the blue target group.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   Your company is rolling out a new version of an API. You want to send 10% of live traffic to the new version while the rest goes to the stable version. Both versions are deployed in separate target groups behind the same Application Load Balancer. What is the simplest way to achieve this traffic split?

   • ACreate a weighted target group and assign weights of 90 to the stable group and 10 to the new group.
   • BCreate a second listener rule that forwards all requests from a specific IP range to the new target group.
   • CRegister the new instances in the stable target group and rely on health checks to gradually include them.
   • DUse a Network Load Balancer in front of the ALB to split traffic between the two target groups.
   Reveal Solution Discussion Select an answer first