Google Cloud

Google Cloud Certified – Professional Cloud Network Engineer

PR000240

Become a certified Professional Cloud Network Engineer with exam code PR000240 to validate your networking skills in Google Cloud.

492 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 401–410 of 492

Q401

A company needs to securely connect its on-premises network to its Google Cloud VPC. What should they use?

  • A Cloud VPN
  • B Cloud NAT
  • C Cloud Router
  • D Private Google Access
Explanation Cloud VPN enables secure connections between on-premises networks and Google Cloud VPCs, while the other options serve different purposes.
Q402

What happens when you enable VPC Flow Logs for a subnet?

  • A Impedes network performance
  • B Stores packet data only
  • C Logs IP packets and connections
  • D Automatically blocks all traffic
Explanation VPC Flow Logs capture information about IP packets flowing through the subnet, while others state incorrect effects or capabilities.
Q403

Which service is best for interconnecting Virtual Private Clouds?

  • A Cloud Interconnect
  • B Cloud VPN
  • C VPC Peering
  • D Identity-Aware Proxy
Explanation VPC Peering directly connects VPCs, while others serve different purposes.
Q404

A company needs to restrict access to certain GCP resources based on user identity. What should they use?

  • A Cloud Functions
  • B IAM Roles
  • C Firewall Rules
  • D VPC Flow Logs
Explanation IAM Roles control resource access based on identity, versus other options not designed for this.
Q405

You are configuring global load balancing for a dynamic content website. What will happen if you select only one backend service?

  • A Traffic will not route accurately.
  • B Only some users will receive content.
  • C You will increase redundancy.
  • D Performance will automatically improve.
Explanation With one backend service, traffic distribution is ineffective and points of failure increase.
Q406

Which service provides a service mesh in GCP?

  • A Google Kubernetes Engine
  • B Cloud Run
  • C Anthos Service Mesh
  • D App Engine
Explanation Anthos Service Mesh provides a service mesh; other options handle different compute functionalities.
Q407

A company needs to connect its on-premises network to its VPC over a secure connection. Which service should they use?

  • A Cloud VPN
  • B Cloud Interconnect
  • C VPC Peering
  • D Cloud Router
Explanation Cloud VPN creates secure tunnels; other options serve different networking needs.
Q408

What happens when a custom route is created in GCP with a higher priority number than the default route?

  • A Custom route will not be used
  • B Traffic will prefer the custom route
  • C Both routes are used equally
  • D Only default route is used
Explanation Higher priority numbers indicate lower precedence, so the custom route is ignored.
Q409

Which service is used for network load balancing in GCP?

  • A Cloud Load Balancing
  • B Cloud Spanner
  • C Cloud Functions
  • D Cloud Run
Explanation Cloud Load Balancing distributes traffic across resources; others do not handle load balancing effectively.
Q410

A company needs to restrict VM SSH access to specific IP addresses, which GCP feature should they use?

  • A VPC Firewall Rules
  • B IAM Policies
  • C Service Accounts
  • D Cloud Armor
Explanation VPC Firewall Rules control traffic at the VM level, while others do not specifically address network access.