Google Professional Cloud Network Engineer Practice Test - Questions Answers, Page 8
List of questions
Question 71

You want to implement an IPSec tunnel between your on-premises network and a VPC via Cloud VPN. You need to restrict reachability over the tunnel to specific local subnets, and you do not have a device capable of speaking Border
Gateway Protocol (BGP).
Which routing option should you choose?
Explanation:
Reference: https://cloud.google.com/vpn/docs/concepts/overview
Question 72

You have enabled HTTP(S) load balancing for your application, and your application developers havereported that HTTP(S) requests are not being distributed correctly to your Compute Engine VirtualMachine instances. You want to find data about how the request are being distributed.
Which two methods can accomplish this? (Choose two.)
Question 73

You want to use Partner Interconnect to connect your on-premises network with your VPC. You already have an Interconnect partner.
What should you first?
Explanation:
https://cloud.google.com/network-connectivity/docs/interconnect/concepts/partneroverview?hl=En#provisioning "
To provision a Partner Interconnect connection with a serviceprovider, you start by connecting your on-premises network to a supported service provider. Work with the service provider to establish connectivity.
Question 74

You need to centralize the Identity and Access Management permissions and email distribution for the WebServices Team as efficiently as possible.
What should you do?
Question 75

You are using the gcloud command line tool to create a new custom role in a project by coping a predefined role. You receive this error message: INVALID_ARGUMENT: Permission resourcemanager.projects.list is not valid What should you do?
Explanation:
Reference: https://cloud.google.com/iam/docs/understanding-custom-roles
Question 76

One instance in your VPC is configured to run with a private IP address only. You want to ensure that even if this instance is deleted, its current private IP address will not be automatically assigned to a different instance.
In the GCP Console, what should you do?
Explanation:
https://cloud.google.com/compute/docs/ip-addresses/reserve-static-internal-ipaddress#reservenewip Since here https://cloud.google.com/compute/docs/ip-addresses/reservestatic-internal-ip-address#reservenewip it is written that "automatically allocated or an unused address from an existing subnet".
Question 77

After a network change window one of your company's applications stops working. The application uses an on-premises database server that no longer receives any traffic from the application. The database server IP address is 10.2.1.25.
You examine the change request, and the only change is that 3 additional VPC subnets were created. The new VPC subnets created are 10.1.0.0/16, 10.2.0.0/16, and 10.3.1.0/24/ The on-premises router is advertising 10.0.0.0/8.
What is the most likely cause of this problem?
Question 78

You need to create a new VPC network that allows instances to have IP addresses in both the 10.1.1.0/24 network and the 172.16.45.0/24 network.
What should you do?
Question 79

You are deploying a global external TCP load balancing solution and want to preserve the source IP address of the original layer 3 payload.
Which type of load balancer should you use?
Explanation:
By default TCP/SSL proxy load balancer original client IP address and port information is not preserved, but it can be preserved using the PROXY protocol: https://cloud.google.com/loadbalancing/ docs/tcp#target-proxies
https://medium.com/google-cloud/preserving-client-ips-through-google-clouds-global-tcp-and-sslproxy-load-balancers-3697d76feeb1
Reference: https://cloud.google.com/load-balancing/docs/network
Question 80

Your company has a single Virtual Private Cloud (VPC) network deployed in Google Cloud with access from your on-premises network using Cloud Interconnect. You must configure access only to Google APIs and services that are supported by VPC Service Controls through hybrid connectivity with a service level agreement (SLA) in place. What should you do?
Question