Professional-Cloud-Network-Engineer問題集、Google実際の試験問題

質問 1

You need to create the network infrastructure to deploy a highly available web application in the us-east1 and us-west1 regions. The application runs on Compute Engine instances, and it does not require the use of a database. You want to follow Google-recommended practices. What should you do?

A. Create one VPC with one subnet in each region.
Create an HTTP(S) load balancer with a static IP address.
Choose the standard tier for the network.
Enable Cloud CDN on the load balancer.
Create a CNAME record using the load balancer's IP address in Cloud DNS.

B. Create one VPC with one subnet in each region.
Create a regional network load balancer in each region with a static IP address.
Enable Cloud CDN on the load balancers.
Create an A record in Cloud DNS with both IP addresses for the load balancers.

C. Create one VPC with one subnet in each region.
Create a global load balancer with a static IP address.
Enable Cloud CDN and Google Cloud Armor on the load balancer.
Create an A record using the IP address of the load balancer in Cloud DNS.

D. Create one VPC in each region, and peer both VPCs.
Create a global load balancer.
Enable Cloud CDN on the load balancer.
Create a CNAME for the load balancer in Cloud DNS.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

Datachamps is an organization resource and it has many projects under it .The company uses BigQuery for data analysis. They want a user named admin-bigquery to be the admin for all BigQuery data across all of the projects under the Datachamps organization . Monitorbigquery is a service account that's responsible for monitoring the size of all the tables across all projects in the Datachamps organization. What predefined roles must be given to admin-bigquery (user) and Monitorbigquery (service account) .

A. bigquery.connectionAdmin to admin-bigquery and bigquery.dataEditor to Monitoringbigquery service account .

B. bigquery.user to admin-bigquery and bigquery.dataViewer to Monitorbigquery service

C. bigquery.admin to admin-bigquery and bigquery.dataOwner to Monitorbigquery service account.

D. bigquery.admin to admin-bigquery and bigquery.dataViewer to Monitorbigquery service account.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 3

You are planning a large application deployment in Google Cloud that includes on-premises connectivity. The application requires direct connectivity between workloads in all regions and on- premises locations without address translation, but all RFC 1918 ranges are already in use in the on-premises locations. What should you do?

A. Use multiple VPC networks with a transit network using VPC Network Peering.

B. Use overlapping RFC 1918 ranges with multiple isolated VPC networks.

C. Use non-RFC 1918 ranges with a single global VPC.

D. Use overlapping RFC 1918 ranges with multiple isolated VPC networks and Cloud NAT.

正解: C

質問 4

You have the networking configuration shown in the diagram. Two VLAN attachments associated with two Dedicated Interconnect connections terminate on the same Cloud Router (mycloudrouter). The Interconnect connections terminate on two separate on-premises routers.
You advertise the same prefixes from the Border Gateway Protocol (BGP) sessions associated with each of the VLAN attachments.
You notice an asymmetric traffic flow between the two Interconnect connections. Which of the following actions should you take to troubleshoot the asymmetric traffic flow?

A. From the Google Cloud console, navigate to Cloud Logging to view VPC Flow Logs and review the results.

B. From the Cloud CLI, run gcloud compute --project PROJECT_ID routers get-status mycloudrouter
--region REGION and review the results.

C. From the Cloud CLI, run gcloud compute routers describe mycloudrouter --region REGION and review the results.

D. From the Google Cloud console, navigate to the Hybrid Connectivity, select the Cloud Router, and view BGP sessions.

正解: D

質問 5

You have a storage bucket that contains two objects. Cloud CDN is enabled on the bucket, and both objects have been successfully cached.
Now you want to make sure that one of the two objects will not be cached anymore, and will always be served to the internet directly from the origin.
What should you do?

A. Ensure that the object you don't want to be cached anymore is not shared publicly.

B. Create a new storage bucket, and move the object you don't want to be checked anymore inside it.
Then edit the bucket setting and enable the private attribute.

C. Add an appropriate lifecycle rule on the storage bucket containing the two objects.

D. Add a Cache-Control entry with value private to the metadata of the object you don't want to be cached anymore.
Invalidate all the previously cached copies.

正解: D

質問 6

You are designing a Google Kubernetes Engine (GKE) cluster for a rapidly scaling microservices application. The application will have thousands of pods and hundreds of services. The application requires internal pod-to-pod communication and exposure of services internally. You want to follow Google's recommended approach to ensure efficient IP address utilization within your existing Virtual Private Cloud (VPC) subnet while leveraging Google Cloud's native networking capabilities. What should you do?

A. Implement a mesh of Istio service proxies on every pod to manage all internal pod-to-pod communication and service discovery.

B. Configure the GKE cluster to use a VPC-native mode with the main subnets primary IP range for nodes, and separate secondary IP ranges for pods and services.

C. Deploy a route-based GKE cluster and rely on GKE-managed routing tables for all pod and service communication.

D. Allocate a primary IP address range for the entire cluster to encompass both node, pod, and service IP addresses.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

Your company is running out of network capacity to run a critical application in the on-premises data center. You want to migrate the application to GCP. You also want to ensure that the Security team does not lose their ability to monitor traffic to and from Compute Engine instances.
Which two products should you incorporate into the solution? (Choose two.)

A. Compute Engine instance system logs

B. Cloud Audit logs

C. Firewall logs

D. VPC flow logs

E. Stackdriver Trace

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 8

After a network change window one of your company's applications stops working. The application uses an on-premises database server that no longer receives any traffic from the application. The database server IP address is 10.2.1.25. You examine the change request, and the only change is that 3 additional VPC subnets were created. The new VPC subnets created are 10.1.0.0/16, 10.2.0.0/16, and 10.3.1.0/24/ The on-premises router is advertising 10.0.0.0/8.
What is the most likely cause of this problem?

A. The on-premises router is not advertising a route for the database server.

B. The less specific VPC subnet route is taking priority.

C. A cloud firewall rule that blocks traffic to the on-premises database server was created during the change.

D. The more specific VPC subnet route is taking priority.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 9

Your company has a Virtual Private Cloud (VPC) with two Dedicated Interconnect connections in two different regions: us-west1 and us-east1. Each Dedicated Interconnect connection is attached to a Cloud Router in its respective region by a VLAN attachment. You need to configure a high availability failover path. By default, all ingress traffic from the on-premises environment should flow to the VPC using the us-west1 connection. If us-west1 is unavailable, you want traffic to be rerouted to us-east1. How should you configure the multi-exit discriminator (MED) values to enable this failover path?

A. Use global routing. Set the us-east1 Cloud Router to a base priority of 100, and set the us-west1 Cloud Router to a base priority of 1

B. Use regional routing. Set the us-east1 Cloud Router to a base priority of 100, and set the us- west1 Cloud Router to a base priority of 1

C. Use global routing. Set the us-east1 Cloud Router to a base priority of 1000, and set the us-west1 Cloud Router to a base priority of 1

D. Use regional routing. Set the us-east1 Cloud Router to a base priority of 1000, and set the us- west1 Cloud Router to a base priority of 1

正解: C

解説: (PassTest メンバーにのみ表示されます)

Google Cloud Certified - Professional Cloud Network Engineer - Professional-Cloud-Network-Engineer 模擬練習