MoreExam
1. Question Content...
EXPLANATION
Answer: X - EXPLANATION Content.
Question1: You are configuring a new instance of Cloud Router in your Organization's Google Cloud environment to allow connection across a new Dedicated Interconnect to your data center Sales, Marketing, and IT each have a service project attached to the Organization's host project.Where should you create the Cloud Router instance?
Question2: You decide to set up Cloud NAT. After completing the configuration, you find that one of your instances is not using the Cloud NAT for outbound NAT.What is the most likely cause of this problem?
Question3: You have created a firewall with rules that only allow traffic over HTTP, HTTPS, and SSH ports. While testing, you specifically try to reach the server over multiple ports and protocols; however, you do not see any denied connections in the firewall logs. You want to resolve the issue.What should you do?
Question4: You have an application hosted on a Compute Engine virtual machine instance that cannot communicate with a resource outside of its subnet. When you review the flow and firewall logs, you do not see any denied traffic listed.During troubleshooting you find:* Flow logs are enabled for the VPC subnet, and all firewall rules are set to log.* The subnetwork logs are not excluded from Stackdriver.* The instance that is hosting the application can communicate outside the subnet.* Other instances within the subnet can communicate outside the subnet.* The external resource initiates communication.What is the most likely cause of the missing log lines?
Question5: You need to create a new VPC network that allows instances to have IP addresses in both the 10.1.1.0/24 network and the 172.16.45.0/24 network.What should you do?
Question6: You have deployed a new internal application that provides HTTP and TFTP services to on-premises hosts. You want to be able to distribute traffic across multiple Compute Engine instances, but need to ensure that clients are sticky to a particular instance across both services.Which session affinity should you choose?
Question7: You have recently been put in charge of managing identity and access management for your organization. You have several projects and want to use scripting and automation wherever possible. You want to grant the editor role to a project member.Which two methods can you use to accomplish this? (Choose two.)
Question8: You are increasing your usage of Cloud VPN between on-premises and GCP, and you want to support more traffic than a single tunnel can handle. You want to increase the available bandwidth using Cloud VPN.What should you do?
Question9: You need to create a GKE cluster in an existing VPC that is accessible from on-premises. You must meet the following requirements:IP ranges for pods and services must be as small as possible.The nodes and the master must not be reachable from the internet.You must be able to use kubectl commands from on-premises subnets to manage the cluster.How should you create the GKE cluster?
Question10: You are deploying a global external TCP load balancing solution and want to preserve the source IP address of the original layer 3 payload.Which type of load balancer should you use?
Question11: You want to use Cloud Interconnect to connect your on-premises network to a GCP VPC. You cannot meet Google at one of its point-of-presence (POP) locations, and your on-premises router cannot run a Border Gateway Protocol (BGP) configuration.Which connectivity model should you use?
Question12: Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You believe you have identified a potential malicious actor, but aren't certain you have the correct client IP address. You want to identify this actor while minimizing disruption to your legitimate users.What should you do?
Question13: You are designing a shared VPC architecture. Your network and security team has strict controls over which routes are exposed between departments. Your Production and Staging departments can communicate with each other, but only via specific networks. You want to follow Google-recommended practices.How should you design this topology?
Question14: You are using the gcloud command line tool to create a new custom role in a project by coping a predefined role. You receive this error message:INVALID_ARGUMENT: Permission resourcemanager.projects.list is not valid What should you do?
Question15: You need to define an address plan for a future new GKE cluster in your VPC. This will be a VPC native cluster, and the default Pod IP range allocation will be used. You must pre-provision all the needed VPC subnets and their respective IP address ranges before cluster creation. The cluster will initially have a single node, but it will be scaled to a maximum of three nodes if necessary. You want to allocate the minimum number of Pod IP addresses.Which subnet mask should you use for the Pod IP address range?
Question16: You have a storage bucket that contains the following objects:- folder-a/image-a-1.jpg- folder-a/image-a-2.jpg- folder-b/image-b-1.jpg- folder-b/image-b-2.jpgCloud CDN is enabled on the storage bucket, and all four objects have been successfully cached. You want to remove the cached copies of all the objects with the prefix folder-a, using the minimum number of commands.What should you do?
Question17: You need to establish network connectivity between three Virtual Private Cloud networks, Sales, Marketing, and Finance, so that users can access resources in all three VPCs. You configure VPC peering between the Sales VPC and the Finance VPC. You also configure VPC peering between the Marketing VPC and the Finance VPC. After you complete the configuration, some users cannot connect to resources in the Sales VPC and the Marketing VPC. You want to resolve the problem.What should you do?
Question18: After a network change window one of your company's applications stops working. The application uses an on-premises database server that no longer receives any traffic from the application. The database server IP address is 10.2.1.25. You examine the change request, and the only change is that 3 additional VPC subnets were created. The new VPC subnets created are 10.1.0.0/16, 10.2.0.0/16, and 10.3.1.0/24/ The on-premises router is advertising 10.0.0.0/8.What is the most likely cause of this problem?
Question19: You have a web application that is currently hosted in the us-central1 region. Users experience high latency when traveling in Asi a. You've configured a network load balancer, but users have not experienced a performance improvement. You want to decrease the latency.What should you do?
Question20: You are migrating to Cloud DNS and want to import your BIND zone file.Which command should you use?
Question21: You create multiple Compute Engine virtual machine instances to be used as TFTP servers.Which type of load balancer should you use?
Question22: You created a new VPC for your development team. You want to allow access to the resources in this VPC via SSH only.How should you configure your firewall rules?
Question23: You want to configure load balancing for an internet-facing, standard voice-over-IP (VOIP) application.Which type of load balancer should you use?
Question24: In your company, two departments with separate GCP projects (code-dev and data-dev) in the same organization need to allow full cross-communication between all of their virtual machines in GCP. Each department has one VPC in its project and wants full control over their network. Neither department intends to recreate its existing computing resources. You want to implement a solution that minimizes cost.Which two steps should you take? (Choose two.)
Question25: Your company has just launched a new critical revenue-generating web application. You deployed the application for scalability using managed instance groups, autoscaling, and a network load balancer as frontend. One day, you notice severe bursty traffic that the caused autoscaling to reach the maximum number of instances, and users of your application cannot complete transactions. After an investigation, you think it as a DDOS attack. You want to quickly restore user access to your application and allow successful transactions while minimizing cost.Which two steps should you take? (Choose two.)
Question26: You have deployed a proof-of-concept application by manually placing instances in a single Compute Engine zone. You are now moving the application to production, so you need to increase your application availability and ensure it can autoscale.How should you provision your instances?
Question27: You have a storage bucket that contains two objects. Cloud CDN is enabled on the bucket, and both objects have been successfully cached. Now you want to make sure that one of the two objects will not be cached anymore, and will always be served to the internet directly from the origin.What should you do?
Question28: Your on-premises data center has 2 routers connected to your Google Cloud environment through a VPN on each router. All applications are working correctly; however, all of the traffic is passing across a single VPN instead of being load-balanced across the 2 connections as desired.During troubleshooting you find:* Each on-premises router is configured with a unique ASN.* Each on-premises router is configured with the same routes and priorities.* Both on-premises routers are configured with a VPN connected to a single Cloud Router.* BGP sessions are established between both on-premises routers and the Cloud Router.* Only 1 of the on-premises router's routes are being added to the routing table.What is the most likely cause of this problem?