PCNE practice questions 81–90

1. Question 81 · 255 in bank

   You have two VPCs: VPC A in Project A and VPC B in Project B. The VPCs are peered, and each VPC has VM instances in four zones. You are using the Network Intelligence Center Performance Dashboard to investigate the packet loss for traffic flows that start in VPC A and terminate in VPC B. You need the reported packet loss metric to have at least a 90% confidence level. What should you do?

   • AEnsure that each zone in each of the VPC networks has at least 10 compute instances. Look in Project A for the reported metric.
   • BEnsure that each zone in each of the VPC networks has at least 9 compute instances. Look in Project B for the reported metric.
   • CEnsure that each zone in each of the VPC networks has at least 9 compute instances. Look in Project A for the reported metric.
   • DEnsure that each zone in each of the VPC networks has at least 10 compute instances. Look in Project B for the reported metric.

   Show answer

   Answer: D

   Explanation

   D, as explained in https://cloud.google.com/network-intelligence-center/docs/performance-dashboard/concepts/metrics-views?hl=en#metric_availability_and_confidence_levels and https://cloud.google.com/network-intelligence-center/docs/performance-dashboard/concepts/metrics-views?hl=en#packet-loss "90% confidence 2.5 VMs multiplied by the number of zones in the project." Which in our case is 2.5 x 4 = 10. "If the peered networks are in different projects, packet loss is visible in the destination project." Which in this case is project B.

   Source: Adapted from community discussion — Positron75

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 82 · 255 in bank

   You are designing a new network infrastructure for your customer in Google Cloud. Your customer requires a connection between two Google Cloud VPCs that must include a VPN tunnel. You want to follow Google-recommended practices while ensuring maximum availability of the connection. Which VPN configuration should you choose?

   • APolicy-based VPN using Classic VPN between the two Google Cloud VPCs
   • BBorder Gateway Protocol (BGP)-based VPN using Classic VPN between the two Google Cloud VPCs
   • CRoute-based VPN using Classic VPN between the two Google Cloud VPCs
   • DBorder Gateway Protocol (BGP)-based VPN using HA VPN between the two Google Cloud VPCs

   Show answer

   Answer: D

   Explanation

   HA VPN provides high availability by using two tunnels that terminate on two separate Google Cloud VPN gateways. BGP enables dynamic routing between the on-premises network and Google Cloud, allowing for automatic failover in case one VPN gateway or tunnel becomes unavailable. This ensures continuous connectivity between the two VPCs with minimal downtime. Options A, B, and C use Classic VPN, which is not recommended for new deployments as it lacks certain features such as high availability and dynamic routing. Therefore, option D is the most suitable choice for ensuring maximum availability and following Google-recommended practices.

   Source: Adapted from community discussion — [Removed]

   Next question

3. Question 83 · 255 in bank

   Your company is moving to a hybrid cloud environment and needs to connect two on-premises data centers to Google Cloud. Your company has opted for no service level agreement (SLA) on the Dedicated Interconnect ports. You set up a single Dedicated Interconnect to connect each on-premises data center to Google Cloud: one Dedicated Interconnect in us-east1 and another Dedicated Interconnect in us-west1. You also configured a Cloud Router for each Dedicated Interconnect in each respective region. You now need to configure the Interconnect attachments to provide as much high availability diversity as possible based on this design. What should you do?

   • A• Build one VLAN attachment from each Dedicated Interconnect corresponding to the Cloud Router in that region. • Enable global routing at the VPC layer.
   • B• Build one VLAN attachment from each Dedicated Interconnect corresponding to the Cloud Router in that region. • Enable regional routing at the VPC layer.
   • C• Build two VLAN attachments from each Dedicated Interconnect: one connecting to the Cloud Router in us-east1, and one connecting to the Cloud Router in us-west1. • Enable regional routing at the VPC layer.
   • D• Build two VLAN attachments from each Dedicated Interconnect: one connecting to the Cloud Router in us-east1, and one connecting to the Cloud Router in us-west1. • Enable global routing at the VPC layer.

   Show answer

   Answer: D

   Next question

4. Question 84 · 255 in bank

   You are deploying your infrastructure in the us-central1 region. Your on-premises data center is located in New York City, and the Google Cloud region closest to New York City is us-east4. Your Cloud Interconnect is located in Ashburn, Virginia (VA), United States. You need to use Cloud Interconnect to connect your application infrastructure with backend systems in your data center location. You do not expect the application bandwidth to exceed 500 Mbps. You want to minimize latency and cost. What should you do?

   • ACreate a Cloud Router and VLAN attachments in the us-east4 region attached to your physical Interconnect in Ashburn, VEnable global routing in your VPC. Set the bandwidth on the VLAN attachments to 500 Mbps.
   • BCreate a Cloud Router and VLAN attachments in the us-east4 region attached to your physical Interconnect in Ashburn, VA. Enable global routing in your VPC.
   • CCreate a Cloud Router in the us-central1 region and VLAN attachments in the us-east4 region attached to your physical Interconnect in Ashburn, VA. Enable global routing in your VPC.
   • DCreate a Cloud Router and VLAN attachments in the us-central1 region attached to your physical Interconnect in Ashburn, VA.

   Show answer

   Answer: B

   References

   • Google Cloud documentation

   Next question

5. Question 85 · 255 in bank

   Select 2

   You have provisioned a Cloud Interconnect connection with a VLAN attachment. You configured Border Gateway Protocol (BGP) between your on-premises router and your Cloud Router. After deploying and testing the connection, you discover that the BGP session is not established between your on-premises router and the Cloud Router. Which two actions should you take to resolve this issue? (Choose two.)

   • AFrom the Google Cloud console, run gcloud compute routers get-status to verify the Address Resolution Protocol (ARP) learned.
   • BVerify that you have configured the on-premises router's subinterface with a subnet mask of /31.
   • CVerify that you have configured the on-premises router's eBGP multihop with a minimum hop length of 4.
   • DVerify that you have configured the on-premises router's BGP security parameters to use MD5 authentication.
   • EFrom the Google Cloud console, run gcloud compute interconnects get-diagnostics to verify the Address Resolution Protocol (ARP) learned.

   Show answer

   Answer: BE

   Next question

6. Question 86 · 255 in bank

   Your company has a single on-premises data center that needs to be connected to a VPC in Google Cloud. The total bandwidth requirement is 10Gbps. The connection must be redundant and have a minimum SLA of 99.9%. Due to the sensitive nature of the workloads, you need to implement the solution with the lowest latency. What should you do?

   • AOrder a 10Gbps Partner Interconnect VLAN attachment. Create a Cloud Router in your Google Cloud VPC.
   • BOrder two 10Gbps Dedicated Interconnect connections in a single metropolitan area (metro). Distribute the connections across different edge availability domains. Create a Cloud Router and two 10Gbps VLAN attachments.
   • CCreate one HA VPN gateway. Create two tunnels-one tunnel for each of the two interfaces of the HA VPN gateway. Terminate each of the two tunnels on the single public IP address that is configured on the VPN termination device that is located on-premises.
   • DCreate one HA VPN gateway. Create two tunnels-one tunnel for each of the two interfaces of the HA VPN gateway. Terminate each of the two tunnels on different public IPs addresses that are configured on the VPN termination device that is located on-premises.

   Show answer

   Answer: B

   References

   • Google Cloud documentation

   Next question

7. Question 87 · 255 in bank

   Your company deployed a hub and spoke architecture in Google Cloud to host their workloads. They use VPC network peerings to connect the hub and the spokes. You need to replicate the design and use Network Connectivity Center. What should you do?

   • AChoose a Network Connectivity Center star topology. Deploy the hub VPC in the center group. Deploy the spoke VPCs in the edge group.
   • BChoose a Network Connectivity Center star topology. Deploy the spoke VPCs in the center group. Deploy the hub VPC in the edge group.
   • CChoose a Network Connectivity Center mesh topology. Configure the hub and the spokes as Network Connectivity Center spokes.
   • DChoose a Network Connectivity Center mesh topology. Configure the spokes as Network Connectivity Center spokes.

   Show answer

   Answer: A

   References

   • Google Cloud documentation

   Next question

8. Question 88 · 255 in bank

   Your company's web server administrator is migrating on-premises backend servers for an application to GCP. Libraries and configurations differ significantly across these backend servers. The migration to GCP will be lift-and-shift, and all requests to the servers will be served by a single network load balancer frontend. You want to use a GCP-native solution when possible. How should you deploy this service in GCP?

   • ACreate a managed instance group from one of the images of the on-premises servers, and link this instance group to a target pool behind your load balancer.
   • BCreate a target pool, add all backend instances to this target pool, and deploy the target pool behind your load balancer.
   • CDeploy a third-party virtual appliance as frontend to these servers that will accommodate the significant differences between these backend servers.
   • DUse GCP's ECMP capability to load-balance traffic to the backend servers by installing multiple equal-priority static routes to the backend servers.

   Show answer

   Answer: B

   Explanation

   Answer is B: https://cloud.google.com/load-balancing/docs/target-pools 'External TCP/UDP Network Load Balancing can use either a backend service or a target pool to define the group of backend instances that receive incoming traffic' 'Target pools work with forwarding rules that handle TCP and UDP traffic. You must create a target pool before you can use it with a forwarding rule.'

   Source: Adapted from community discussion — desertlotus1211

   References

   • Google Cloud documentation

   Next question

9. Question 89 · 255 in bank

   You are deploying HA VPN within Google Cloud. You need to exchange routes dynamically between your on-premises gateway and Google Cloud. You have already created a HA VPN gateway and a peer VPN gateway resource. What should you do?

   • ACreate a Cloud Router, add VPN tunnels, and configure BGP sessions.
   • BCreate a Cloud Router, add VPN tunnels, and configure static routes to your subnet ranges.
   • CCreate a second HA VPN gateway, add VPN tunnels, and create firewall rules to allow BGP traffic to the Cloud Router.
   • DCreate a second HA VPN gateway, add VPN tunnels, and enable global dynamic routing.

   Show answer

   Answer: A

   Next question

10. Question 90 · 255 in bank

    You are implementing a VPC architecture for your organization by using a Network Connectivity Center hub and spoke topology: • There is one Network Connectivity Center hybrid spoke to receive on-premises routes. • There is one VPC spoke that needs to be added as a Network Connectivity Center spoke. Your organization has limited routable IP space for their cloud environment (192.168.0.0/20). The Network Connectivity Center spoke VPC is connected to on-premises with a Cloud Interconnect connection in the us-east4 region. The on-premises IP range is 172.16.0.0/16. You need to reach on-premises resources from multiple Google Cloud regions (us-west1,europe-central1, and asia-southeast1) and minimize the IP addresses being used. What should you do?

    • A1. Configure a Private NAT gateway and NAT subnet in us-west1(192.168.1.0/24), europe-central1(192.168.2.0/24) and asia-southeast1(192.168.3.0/24). 2. Add the VPC as a spoke and configure an export include policy to advertise only 192.168.1.0/24, 192.168.2.0/24, and 192.168.3.0/24 to the hub. 3. Enable global dynamic routing to allow resources in us-west1, us-central1 and asia-southeast1 to reach the on-premises location through us-east4.
    • B1. Configure a Private NAT gateway instance in us-west1(172.16.1.0/24), europe-central1(172.16.2.0/24), and asia-southeast1(172.16.3.0/24). 2. Add the VPC as a spoke and configure an export include policy on the VPC spoke to advertise only the NAT subnets 172.16.1.0/24, 172.16.2.0/24, and 172.16.3.0/24 to the hub. 3. Enable global dynamic to allow resources in us-west1, us-central1, and asia-southeast1 to reach the on-premises location through us-east4.
    • C1. Configure a Private NAT gateway instance in us-east4(192.168.1.0/24). 2. Add the VPC as a spoke and configure an export include policy on the VPC spoke to advertise 192.168.1.0/24 to the hub. 3. Enable global dynamic routing to allow resources in us-west1, us-central1 and asia-southeast1 to reach the on-premises location through us-east4.
    • D1. Configure a Private NAT gateway instance in us-west1(192.168.1.0/24), europe-central1(192.168.2.0/24), and asia-southeast1(192.168.3.0/24). 2. Add the VPC as a spoke and configure an export exclude policy on the VPC spoke to advertise only the NAT subnets 192.168.1.0/24, 192.168.2.0/24, and 192.168.3.0/24 to the hub. 3. Enable global dynamic routing to allow resources in us-west1, us-central1, and asia-southeast1 to reach the on-premises location through us-east4.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCNE practice, question 81. 255 questions available.