Google Cloud
Google Cloud Certified – Professional Cloud Network Engineer
PR000240
Become a certified Professional Cloud Network Engineer with exam code PR000240 to validate your networking skills in Google Cloud.
492 questions
0 views
Free
Questions 311–320 of 492
A company needs to share files with other companies securely. Which Google Cloud service should they use?
-
A
Cloud Pub/Sub
-
B
Filestore
-
C
Cloud Storage with signed URLs
-
D
Cloud Bigtable
Explanation
Cloud Storage with signed URLs securely shares files, while others are not designed for secure file sharing.
You are configuring a firewall rule to allow HTTP traffic in GCP. What happens when you set priority to 500?
-
A
Allows traffic above priority 500
-
B
Allows traffic below priority 500
-
C
Ignores this rule completely
-
D
Traffic is only allowed from localhost
Explanation
Firewall rules with lower number priorities take precedence over higher numbers, so it will allow traffic below priority 500.
Which service provides VPC network peering?
-
A
Cloud Load Balancing
-
B
Google Cloud VPC
-
C
Cloud Armor
-
D
Cloud Functions
Explanation
Google Cloud VPC allows VPC network peering; others are unrelated services.
A company needs to execute a script when a VM starts. What should they use?
-
A
Startup scripts
-
B
Cloud Functions
-
C
Instance Templates
-
D
Cloud Scheduler
Explanation
Startup scripts run at VM initialization; others do not serve this purpose.
What happens when network tags are incorrectly configured on a firewall rule?
-
A
Firewall rule is applied correctly
-
B
No traffic is blocked
-
C
Traffic is allowed by default
-
D
Firewall rule becomes inactive
Explanation
Incorrect tags result in no matching rules; valid but misconfigured tags cause unrestricted traffic.
Which service enables secure communication between applications in Google Cloud?
-
A
Google Cloud VPN
-
B
Google Cloud Composer
-
C
Google Cloud Pub/Sub
-
D
Google Cloud Build
Explanation
Google Cloud VPN ensures secure communication, while others serve different purposes.
A company needs to create a VPC with multiple subnets across regions. Which approach should they take?
-
A
Create a global VPC
-
B
Use separate VPCs for each region
-
C
Use shared VPC
-
D
Single VPC with region extension
Explanation
Using a shared VPC allows subnets in multiple regions, while the others do not provide this capability.
What happens when you exceed the network egress limit in Google Cloud?
-
A
Traffic is rerouted automatically
-
B
Extra charges apply for overage
-
C
Traffic is throttled
-
D
Service is disabled temporarily
Explanation
Exceeding the limit incurs additional charges, while others do not accurately describe the consequence.
Which service provides DDoS protection for applications?
-
A
Cloud Armor
-
B
Cloud CDN
-
C
Compute Engine
-
D
Cloud Storage
Explanation
Cloud Armor is designed specifically for DDoS protection, while others serve different purposes.
A company needs to connect on-premises data centers to Google Cloud securely. Which service should they use?
-
A
VPN
-
B
Cloud Functions
-
C
Cloud Pub/Sub
-
D
BigQuery
Explanation
VPN provides a secure connection to Google Cloud from on-premises, unlike the other options.