Official Bank
0/233
Page
1/4
Google Cloud Certified – Professional Cloud Network Engineer Exam (Google Professional Cloud Network Engineer) - Google Cloud Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
233
Total Questions
1
Question
You ate planning to use Terraform to deploy the Google Cloud infrastructure for your company, The design must meet the following requirements
• Each Google Cloud project must represent an Internal project that your team Will work on
• After an Internal project is finished, the infrastructure must be deleted
• Each Internal project must have Its own Google Cloud project owner to manage the Google Cloud
resources.
• You have 10—100 projects deployed at a time
While you are writing the Terraform code, you need to ensure that the deployment is simple and the
code is reusable With centralized management What should you do?
• Each Google Cloud project must represent an Internal project that your team Will work on
• After an Internal project is finished, the infrastructure must be deleted
• Each Internal project must have Its own Google Cloud project owner to manage the Google Cloud
resources.
• You have 10—100 projects deployed at a time
While you are writing the Terraform code, you need to ensure that the deployment is simple and the
code is reusable With centralized management What should you do?
Options
A
Create a Single project and Single VPC for each internal project
B
Create a Shared VPC and service project for each internal project
C
Create a Single Shared VPC and attach each Google Cloud project as a service project
D
Create a Single project and additional VPCs for each internal project
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
You need to create the network infrastructure to deploy a highly available web application in the us- east1 and us-west1 regions. The application runs on Compute Engine instances, and it does not require the use of a database. You want to follow Google-recommended practices. What should you do?
Options
A
Create one VPC with one subnet in each region.
Create an HTTP(S) load balancer with a static IP address.
Choose the standard tier for the network.
Enable Cloud CDN on the load balancer.
Create a CNAME record using the load balancer’s IP address in Cloud DNS.
Create an HTTP(S) load balancer with a static IP address.
Choose the standard tier for the network.
Enable Cloud CDN on the load balancer.
Create a CNAME record using the load balancer’s IP address in Cloud DNS.
B
Create one VPC in each region, and peer both VPCs.
Create a global load balancer.
Enable Cloud CDN on the load balancer.
Create a CNAME for the load balancer in Cloud DNS.
Create a global load balancer.
Enable Cloud CDN on the load balancer.
Create a CNAME for the load balancer in Cloud DNS.
C
Create one VPC with one subnet in each region.
Create a regional network load balancer in each region with a static IP address.
Enable Cloud CDN on the load balancers.
Create an A record in Cloud DNS with both IP addresses for the load balancers.
Create a regional network load balancer in each region with a static IP address.
Enable Cloud CDN on the load balancers.
Create an A record in Cloud DNS with both IP addresses for the load balancers.
D
Create one VPC with one subnet in each region.
Create a global load balancer with a static IP address.
Enable Cloud CDN and Google Cloud Armor on the load balancer.
Create an A record using the IP address of the load balancer in Cloud DNS.
Create a global load balancer with a static IP address.
Enable Cloud CDN and Google Cloud Armor on the load balancer.
Create an A record using the IP address of the load balancer in Cloud DNS.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
Your company acquired a new division. The new division’s network team requires complete control over their networking infrastructure. You need to extend your existing Google Cloud network infrastructure, that consists of a single VPC, to allow workloads from all divisions to communicate with each other. You want to avoid incurring extra costs and granting unnecessary permissions to the new division’s networking team. What should you do?
Options
A
O • Create a new project for the new division's network team.
• Create a new VPC within the new project.
• Establish a VPN connection between your existing VPC and the new division's VPC.
• Grant roles/compute .networkAdmin on the newly created project to the new division’s network
team group.
• Create a new VPC within the new project.
• Establish a VPN connection between your existing VPC and the new division's VPC.
• Grant roles/compute .networkAdmin on the newly created project to the new division’s network
team group.
B
Q • Create a new project for the new division's network team.
• Create a new VPC within the new project.
• Establish a VPC peering between your existing VPC and the new division’s VPC.
• Grant roles/compute. networkAdmin on the newly created project to the new division’s network
team group.
• Create a new VPC within the new project.
• Establish a VPC peering between your existing VPC and the new division’s VPC.
• Grant roles/compute. networkAdmin on the newly created project to the new division’s network
team group.
C
O * Create a new project for the new division’s network team.
• Create a new VPC within the new project.
• Establish a VPC peering between your existing VPC and the new division’s VPC.
• Create a new subnet dedicated to the new division’s workloads.
• Grant roles/compute .networkuser on the new project to the new division's network team group.
• Create a new VPC within the new project.
• Establish a VPC peering between your existing VPC and the new division’s VPC.
• Create a new subnet dedicated to the new division’s workloads.
• Grant roles/compute .networkuser on the new project to the new division's network team group.
D
Q • Ensure that the project hosting the existing network infrastructure is enabled as a host project.
• Create a new subnet dedicated to the new division’s workloads in the existing VPC.
• Grant roles/compute. networkuser on the newly created subnet to the new division’s network
team group.
• Create a new subnet dedicated to the new division’s workloads in the existing VPC.
• Grant roles/compute. networkuser on the newly created subnet to the new division’s network
team group.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
You are configuring an Application Load Balancer. The backend resides in your on-premises data center and is connected by Dedicated Interconnect. You need to ensure the load balancer can
Reveal Only
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
Your software team is developing an on-premises web application that requires direct connectivity to Compute Engine Instances in GCP using the RFC 1918 address space. You want to choose a connectivity solution from your on-premises environment to GCP, given these specifications: Your ISP is a Google Partner Interconnect provider. Your on-premises VPN device’s internet uplink and downlink speeds are 10 Gbps. A test VPN connection between your on-premises gateway and GCP is performing at a maximum speed of 500 Mbps due to packet losses. Most of the data transfer will be from GCP to the on-premises environment. The application can burst up to 1.5 Gbps during peak transfers over the Interconnect. Cost and the complexity of the solution should be minimal.
How should you provision the connectivity solution?
How should you provision the connectivity solution?
Options
A
Provision a Partner Interconnect through your ISP.
B
Create multiple VPN tunnels to account for the packet losses, and increase bandwidth using ECMP.
C
Provision a Dedicated Interconnect instead of a VPN.
D
Use network compression over your VPN to increase the amount of data you can send over your VPN.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.