Free Practice Google Professional-Cloud-Network-Engineer Exam Questions 2025

Stay ahead with 100% Free Professional Cloud Network Engineer Professional-Cloud-Network-Engineer Dumps Practice Questions

Page: 1 / 43

Total 214 Questions | Updated On: Jun 04, 2025

Add To Cart

Question 1

You are configuring the firewall endpoints as part of the Cloud Next Generation Firewall (Cloud NGFW) intrusion prevention service in Google Cloud. You have configured a threat prevention security profile, and you now need to create an endpoint for traffic inspection. What should you do?

A : Attach the profile to the VPC network, create a firewall endpoint within the zone, and use a firewall policy rule to apply the L7 inspection.

B : Create a firewall endpoint within the zone, associate the endpoint to the VPC network, and use a firewall policy rule to apply the L7 inspection.

C : Create a firewall endpoint within the region, associate the endpoint to the VPC network, and use a firewall policy rule to apply the L7 inspection.

D : Create a Private Service Connect endpoint within the zone, associate the endpoint to the VPC network, and use a firewall policy rule to apply the L7 inspection.

Answer: C

Question 2

Your organization recently re-architected your cloud environment to use Network Connectivity Center. However, an error occurred when you tried to add a new VPC named vpc-dev as a spoke. The error indicated that there was an issue with an existing spoke and the IP space of a VPC named vpc-pre-prod. You must complete the migration quickly and efficiently. What should you do?

A : Remove the conflicting VPC spoke for vpc-pre-prod from the set of VPC spokes in Network Connectivity Center. Add the VPC spoke for vpc-dev. Add the previously removed vpc-pre-prod as a VPC spoke

B : Delete the VMs associated with the conflicting subnets, then delete the conflicting subnets in vpc-dev. Recreate the subnets with a new IP range and redeploy the previously deleted VMs in the new subnets. Add the VPC spoke for vpc-dev.

C : Exclude the conflicting IP range by using the --exclude-export-ranges flag when creating the VPC spoke for vpc-dev.

D : Exclude the conflicting IP range by using the --exclude-export-ranges flag in the hub when attaching the VPC spoke for vpc-dev.

Answer: A

Question 3

Your company's logo is published as an image file across multiple websites that are hosted by your company You have implemented Cloud CDN, however, you want to improve the performance of the cache hit ratio associated with this image file. What should you do?

A : Configure custom cache keys for the backend service that holds the image file, and clear the Host and Protocol checkboxes

B : Configure Cloud Storage as a custom origin backend to host the image file, and select multi-region as the location type

C : Configure versioned IJRLs for each domain to serve users the •mage file before the cache entry expires

D : Configure the default time to live (TTL) as O for the image file.

Answer: A

Question 4

You are migrating to Cloud DNS and want to import your BIND zone file.

Which command should you use?

A : gcloud dns record-sets import ZONE_FILE --zone MANAGED_ZONE

B : gcloud dns record-sets import ZONE_FILE --replace-origin-ns --zone MANAGED_ZONE

C : gcloud dns record-sets import ZONE_FILE --zone-file-format --zone MANAGED_ZONE

D : gcloud dns record-sets import ZONE_FILE --delete-all-existing --zone MANAGED ZONE

Answer: C

Question 5

You suspect that one of the virtual machines (VMs) in your default Virtual Private Cloud (VPC) is under a denial-of-service attack. You need to analyze the incoming traffic for the VM to understand where the traffic is coming from. What should you do?

A : Enable Data Access audit logs of the VPC. Analyze the logs and get the source IP addresses from the subnetworks.get field.

B : Enable VPC Flow Logs for the subnet. Analyze the logs and get the source IP addresses from the connection field.

C : Enable VPC Flow Logs for the VPC. Analyze the logs and get the source IP addresses from the src_location field.

D : Enable Data Access audit logs of the subnet. Analyze the logs and get the source IP addresses from the networks.get field

Answer: B

Page: 1 / 43

Total 214 Questions | Updated On: Jun 04, 2025

Add To Cart