Official Bank
0/233
Page
1/4
Google Cloud Certified – Professional Cloud Network Engineer Exam (Google Professional Cloud Network Engineer) - Google Cloud Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
233
Total Questions
1
Question
You need to create the network infrastructure to deploy a highly available web application in the us- east1 and us-west1 regions. The application runs on Compute Engine instances, and it does not require the use of a database. You want to follow Google-recommended practices. What should you do?
Options
A
Create one VPC with one subnet in each region.
Create an HTTP(S) load balancer with a static IP address.
Choose the standard tier for the network.
Enable Cloud CDN on the load balancer.
Create a CNAME record using the load balancer’s IP address in Cloud DNS.
Create an HTTP(S) load balancer with a static IP address.
Choose the standard tier for the network.
Enable Cloud CDN on the load balancer.
Create a CNAME record using the load balancer’s IP address in Cloud DNS.
B
Create one VPC in each region, and peer both VPCs.
Create a global load balancer.
Enable Cloud CDN on the load balancer.
Create a CNAME for the load balancer in Cloud DNS.
Create a global load balancer.
Enable Cloud CDN on the load balancer.
Create a CNAME for the load balancer in Cloud DNS.
C
Create one VPC with one subnet in each region.
Create a regional network load balancer in each region with a static IP address.
Enable Cloud CDN on the load balancers.
Create an A record in Cloud DNS with both IP addresses for the load balancers.
Create a regional network load balancer in each region with a static IP address.
Enable Cloud CDN on the load balancers.
Create an A record in Cloud DNS with both IP addresses for the load balancers.
D
Create one VPC with one subnet in each region.
Create a global load balancer with a static IP address.
Enable Cloud CDN and Google Cloud Armor on the load balancer.
Create an A record using the IP address of the load balancer in Cloud DNS.
Create a global load balancer with a static IP address.
Enable Cloud CDN and Google Cloud Armor on the load balancer.
Create an A record using the IP address of the load balancer in Cloud DNS.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
Your company acquired a new division. The new division’s network team requires complete control over their networking infrastructure. You need to extend your existing Google Cloud network infrastructure, that consists of a single VPC, to allow workloads from all divisions to communicate with each other. You want to avoid incurring extra costs and granting unnecessary permissions to the new division’s networking team. What should you do?
Options
A
O • Create a new project for the new division's network team.
• Create a new VPC within the new project.
• Establish a VPN connection between your existing VPC and the new division's VPC.
• Grant roles/compute .networkAdmin on the newly created project to the new division’s network
team group.
• Create a new VPC within the new project.
• Establish a VPN connection between your existing VPC and the new division's VPC.
• Grant roles/compute .networkAdmin on the newly created project to the new division’s network
team group.
B
Q • Create a new project for the new division's network team.
• Create a new VPC within the new project.
• Establish a VPC peering between your existing VPC and the new division’s VPC.
• Grant roles/compute. networkAdmin on the newly created project to the new division’s network
team group.
• Create a new VPC within the new project.
• Establish a VPC peering between your existing VPC and the new division’s VPC.
• Grant roles/compute. networkAdmin on the newly created project to the new division’s network
team group.
C
O * Create a new project for the new division’s network team.
• Create a new VPC within the new project.
• Establish a VPC peering between your existing VPC and the new division’s VPC.
• Create a new subnet dedicated to the new division’s workloads.
• Grant roles/compute .networkuser on the new project to the new division's network team group.
• Create a new VPC within the new project.
• Establish a VPC peering between your existing VPC and the new division’s VPC.
• Create a new subnet dedicated to the new division’s workloads.
• Grant roles/compute .networkuser on the new project to the new division's network team group.
D
Q • Ensure that the project hosting the existing network infrastructure is enabled as a host project.
• Create a new subnet dedicated to the new division’s workloads in the existing VPC.
• Grant roles/compute. networkuser on the newly created subnet to the new division’s network
team group.
• Create a new subnet dedicated to the new division’s workloads in the existing VPC.
• Grant roles/compute. networkuser on the newly created subnet to the new division’s network
team group.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
You are designing a hybrid cloud environment for your organization. Your Google Cloud environment is interconnected with your on-premises network using Cloud HA VPN and Cloud Router. The Cloud Router is configured with the default settings. Your on-premises DNS server is located at 192.168.20.88 and is protected by a firewall, and your Compute Engine resources are located at 10.204.0.0/24. Your Compute Engine resources need to resolve on-premises private hostnames using the domain corp.altostrat.com while still resolving Google Cloud hostnames. You want to follow Google-recommended practices. What should you do?
Options
A
Create a private forwarding zone in Cloud DNS for ‘corp.altostrat.com’ called corp-altostrat-com that points to 192.168.20.88.
Configure your on-premises firewall to accept traffic from 10.204.0.0/24.
Set a custom route advertisement on the Cloud Router for 10.204.0.0/24
Configure your on-premises firewall to accept traffic from 10.204.0.0/24.
Set a custom route advertisement on the Cloud Router for 10.204.0.0/24
B
Create a private zone in Cloud DNS for ‘corp altostrat.com’ called corp-altostrat-com.
Configure DNS Server Policies and create a policy with Alternate DNS servers to 192.168.20.88.
Configure your on-premises firewall to accept traffic from 35.199.192.0/19.
Set a custom route advertisement on the Cloud Router for 35.199.192.0/19.
Configure DNS Server Policies and create a policy with Alternate DNS servers to 192.168.20.88.
Configure your on-premises firewall to accept traffic from 35.199.192.0/19.
Set a custom route advertisement on the Cloud Router for 35.199.192.0/19.
C
Create a private forwarding zone in Cloud DNS for ‘corp.altostrat.com’ called corp-altostrat-com that points to 192.168 20.88.
Configure your on-premises firewall to accept traffic from 35.199.192.0/19 Set a custom route advertisement on the Cloud Router for 35.199.192.0/19.
Configure your on-premises firewall to accept traffic from 35.199.192.0/19 Set a custom route advertisement on the Cloud Router for 35.199.192.0/19.
D
Create a private forwarding zone in Cloud DNS for ‘corp .altostrat.com’ called corp-altostrat-com that points to 192.168.20.88.
Configure your on-premises firewall to accept traffic from 10.204.0.0/24.
Modify the /etc/resolv conf file on your Compute Engine instances to point to 192.168.20 88
Configure your on-premises firewall to accept traffic from 10.204.0.0/24.
Modify the /etc/resolv conf file on your Compute Engine instances to point to 192.168.20 88
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
Your software team is developing an on-premises web application that requires direct connectivity to Compute Engine Instances in GCP using the RFC 1918 address space. You want to choose a connectivity solution from your on-premises environment to GCP, given these specifications: Your ISP is a Google Partner Interconnect provider. Your on-premises VPN device’s internet uplink and downlink speeds are 10 Gbps. A test VPN connection between your on-premises gateway and GCP is performing at a maximum speed of 500 Mbps due to packet losses. Most of the data transfer will be from GCP to the on-premises environment. The application can burst up to 1.5 Gbps during peak transfers over the Interconnect. Cost and the complexity of the solution should be minimal.
How should you provision the connectivity solution?
How should you provision the connectivity solution?
Options
A
Provision a Partner Interconnect through your ISP.
B
Create multiple VPN tunnels to account for the packet losses, and increase bandwidth using ECMP.
C
Provision a Dedicated Interconnect instead of a VPN.
D
Use network compression over your VPN to increase the amount of data you can send over your VPN.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
One instance in your VPC is configured to run with a private IP address only. You want to ensure that even if this instance is deleted, its current private IP address will not be automatically assigned to a different instance. In the GCP Console, what should you do?
Options
A
Assign a public IP address to the instance.
B
Add custom metadata to the instance with key internal-address and value reserved.
C
Assign a new reserved internal IP address to the instance.
D
Change the instance’s current internal IP address to static.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.