At Velmora Games, a popular online gaming service runs on Compute Engine instances that have only private IP addresses.

At Nimbrel Systems, an administrator is migrating several on-premises backend servers for an application to Google Cloud.

At Orivanta Labs, you configure Public NAT by using Cloud NAT for a VPC subnet.

At Kestrelune Networks, two Cloud Router BGP paths connect Google Cloud to the same on-premises prefixes.

At Brinova Digital, you are increasing use of an existing statically routed Cloud VPN connection between an on-premises network and Google Cloud.

At Caldris Media, you are disabling DNSSEC for a Cloud DNS public managed zone. You removed what you believed were the relevant DS records from the managed-zone configuration, waited for cached data to expire, and then disabled DNSSEC on the zone.

At Novalith Services, an application on a Compute Engine VM cannot communicate with a resource outside its subnet.

At Tessara Webworks, you use Cloud CDN with an external Application Load Balancer to serve cacheable content.

At Auralink Commerce, a web application is hosted only in the us-central1 region. Users traveling in Asia experience high latency.

At Pinevora Analytics, an application runs on Compute Engine and calls BigQuery to generate results that are written to Cloud Storage.

After a network change window at the fictional company Ravelune Systems, one of the company’s applications stops working.

At the fictional company Elvarix Networks, you need to create a new VPC network that allows instances to have IP addresses in both the 10.1.1.0/24 network and the 172.16.45.0/24 network.

At the fictional company Ventoryx Digital, you are deploying a global external TCP load-balancing solution and want to preserve the source IP address of the original Layer 3 packet.

At the fictional company Quorinex Financial, the company has a single VPC network deployed in Google Cloud with access from its on-premises network through Cloud Interconnect.

At the fictional company Ardelune Security, the security team prefers managed services whenever possible.

At the fictional company Nimbrelis Platforms, you are configuring your Google Cloud environment to connect to your on-premises network.

At the fictional company Teralith Commerce, you are configuring load balancing for a standard three-tier application consisting of web, application, and database tiers.

At the fictional company Zorvanta Security, the organization has a new security policy requiring you to monitor the payloads of all egress traffic from virtual machines in region us-west2.

At the fictional company Caldriva Software, you are developing an HTTP API hosted on a Compute Engine virtual machine instance that must be invoked only by multiple clients within the same VPC network.

At the fictional company Veridianex Networks, you recently deployed Cloud VPN to connect your on-premises data center to Google Cloud.

At the fictional company Arvionex Networks, you configured Cloud VPN with dynamic routing by using Border Gateway Protocol (BGP).

At the fictional company Brevanta Systems, your organization has a single VPC network in Google Cloud that is connected to on-premises locations by Cloud Interconnect.

At the fictional company Celyrion Group, your organization has one VPC network with subnets in us-east1, us-west4, and europe-west4.

At the fictional company Doryvex Holdings, your organization uses Shared VPC with one host project and three service projects.

At the fictional company Elarvanta Security, you are implementing a new network security policy for two Compute Engine VMs in the same VPC network.

At the fictional company Fervoryx Services, a Google Cloud service communicates with an on-premises service through Dedicated Interconnect.

At the fictional company Galdryne Media, you are configuring a new externally available HTTP application.

At the fictional company Helyranta Applications, your team is developing an application for users around the world.

At the fictional company Iverona Workspace, you are designing a new connectivity solution for the enterprise network to access Google Workspace.

At the fictional company Jorvexis Security, you suspect that one Compute Engine VM in the default VPC network is receiving a denial-of-service attack.

At the fictional company Asteronix Networks, the cloud network has hybrid connectivity to an on-premises environment through Cloud Interconnect in two regions, us-east4 and us-west1.

At the fictional company Cynerexa Cloud, your organization recently re-architected its environment to use Network Connectivity Center.

At the fictional company Dovaryx Media, the networking team recently enabled Cloud CDN for an external-facing service exposed through an external Application Load Balancer.

At the fictional company Elyvanta Group, all inbound SMTP traffic to the organization’s Google Cloud environment must be blocked except traffic originating from the corporate network.

At the fictional company Fervoryn Applications, a subset of applications in multiple Google Cloud regions requires internet access.

At the fictional company Galyrex Infrastructure, you are implementing hybrid connectivity by using redundant Dedicated Interconnect connections.

At the fictional company Heloryx Data, multiple Compute Engine VMs in a VPC network have only internal IP addresses and must reach Cloud Storage APIs privately.

At the fictional company Ilyrion Cloud, resources have recently been migrated from on-premises to Google Cloud.

At the fictional company Javorenta Security, the security team has discovered a high risk of malicious activity originating from internet-connected VMs.

At the fictional company Keryvanta Networks, the organization uses a hub-and-spoke architecture based on VPC Network Peering, and hybrid connectivity is centralized in the hub VPC.

At the fictional company Brinovexa Group, your company acquired a new division.

At the fictional company Ceralynx Finance, a critical project requires highly available encrypted connectivity to an on-premises network.

At the fictional company Davorixa Media, you manage static assets for a global website.

At the fictional company Elyranta Global, you need a high-throughput, reliable, private connection between an on-premises data center in Frankfurt and a Google Cloud VPC network in europe-west3.

At the fictional company Fervonix Security, your organization is introducing new internet-egress controls.

At the fictional company Galyrex Finance, a newly provisioned 10-Gbps Dedicated Interconnect connects an on-premises data center to a Google Cloud VPC network.

At the fictional company Havorixa Commerce, a global e-commerce website uses Cloud CDN.

At the fictional company Ilyranta Security, you suspect that one Compute Engine VM in a production subnet has been compromised because it is communicating with a malicious external IP address.

At the fictional company Jorynexa Commerce, shop.example.com is a global application with independent deployments in us-central1, europe-west1, and asia-east1.

At the fictional company Kervonixa Apps, two applications run in separate Google Cloud VPC networks, vpc-a and vpc-b, in different projects.

At Straventa Group, you are designing a Shared VPC architecture for Production and Staging departments.

At Mirelune Software, you are extending a working automation workflow that authenticates as a service account.

At Quendaris Technologies, you use Infrastructure Manager with Terraform configurations to deploy Google Cloud infrastructure.

At Solvexa Holdings, you manage Identity and Access Management across several Google Cloud projects and want to use scripting or API-based automation wherever possible.

At Arclumen Data, your on-premises network has a 10-Gbps Direct Peering connection to Google.

At the fictional company Velquora Systems, you are designing a multinational environment that is moving to Google Cloud.

At the fictional company Nimbryx Labs, you are designing a Google Kubernetes Engine (GKE) cluster.

At the fictional company Orvanta Messaging, operations have expanded from EMEA into APAC.

At the fictional company Klyrion Works, your organization is collaborating with a partner to deliver a customer solution.

At the fictional company Tervexa Media, a Cloud Storage bucket is used as a Cloud CDN backend.

At the fictional company Orbynex Cloud, you have applications running in the us-west1 and us-east1 regions.

At the fictional company Lumeraxis Web, you need to create the network infrastructure for a highly available web application deployed in the us-east1 and us-west1 regions.

At the fictional company Pyravon Data, you are the network administrator responsible for hybrid connectivity.

At the fictional company Feronix Group, the company has separate VPC networks in a single region for two departments: Sales and Finance.

At the fictional company Astralune Analytics, you recently noticed a recurring daily spike in network usage in your Google Cloud project.

At the fictional company Velyrix Systems, you need to enable Private Google Access for some subnets in a Virtual Private Cloud (VPC) network.

At the fictional company Orvexa Media, you deployed a global external Application Load Balancer, but health checks to TCP port 80 on a Compute Engine VM backend are failing and the load balancer does not send application traffic to that backend.

At the fictional company Navorin Labs, you have a hub-and-spoke architecture in which each spoke VPC network is connected only to a central hub VPC network by VPC Network Peering.

At the fictional company Calytrix Applications, you recently deployed an application in Google Cloud.

At the fictional company Pyravelle Group, your Google Cloud organization contains two folders named Dev and Prod.

At the fictional company Koryvanta Cloud, your security team requires the following SSH policy across every project and VPC network in the Google Cloud organization.

At the fictional company Lumerixa Services, you are designing a TCP application whose backend servers listen internally on TCP port 800.

At the fictional company Mavoryx Games, you are reviewing and tuning Secure Web Proxy.

At the fictional company Noryvex Microservices, you have several microservices running on private IP addresses in an existing VPC network.

At the fictional company Orlentra Infrastructure, you have a Dedicated Interconnect connection with 20 Gbps of physical connection capacity and one VLAN attachment currently configured with a maximum capacity of 10 Gbps.

At the fictional company Ardelixa Networks, you have a VPC network with two Dedicated Interconnect connections in different regions: us-west1 and us-east1.

At the fictional company Brelunex Platforms, a private Google Kubernetes Engine (GKE) cluster named customer-1-cluster is deployed in us-central1-c.

At the fictional company Cavorixa Media, the same company logo image is served through Cloud CDN on multiple company-owned websites that use different hostnames.

At the fictional company Delyrion Systems, two departments use separate VPC networks in one Google Cloud region.

At the fictional company Evoranta Cloud, you are designing new private Google Kubernetes Engine (GKE) Standard clusters.

At the fictional company Lumorexa Systems, an on-premises VPN device supports only IKEv1 and does not support BGP.

At the fictional company Mervonix Security, you plan to deploy Google Cloud Armor security policies that use preconfigured web application firewall rules.

At the fictional company Navorixa AI, the organization uses Gemini Enterprise Agent Platform online inference in us-central1.

At the fictional company Olyranta Platforms, application teams are migrating services to Google Kubernetes Engine (GKE).

At the fictional company Asterivia Systems, you are implementing a Shared VPC network for an organization with distributed application teams.

At the fictional company Brinovara Networks, you are configuring HA VPN between an on-premises environment and a Google Cloud VPC network.

At the fictional company Ceralyn Data, organization policy requires all internal IP addresses used by database Compute Engine VMs to be statically reserved.

At the fictional company Dorynexa Security, you deployed a mission-critical application in its own Google Cloud project and configured a Cloud Next Generation Firewall Enterprise threat-prevention security profile that uses the default threat signatures.

At the fictional company Elvarion Multicloud, you are configuring Cross-Cloud Interconnect connectivity from Google Cloud to two cloud service providers, CSP 1 and CSP 2.

At the fictional company Ferlunexa Applications, a VPC-native Google Kubernetes Engine (GKE) Standard cluster uses nodes with external IP addresses.

At the fictional company Lumorixa Networks, multiple Cloud VPN tunnels connect a Google Cloud VPC network to one branch office.

At the fictional company Meryvanta Finance, a fleet of Compute Engine VMs processes sensitive financial data and must call the Cloud Storage API.

At the fictional company Navorixa Banking, a critical application in a Google Cloud VPC network communicates frequently with a Cloud SQL for MySQL instance containing sensitive customer data.

At the fictional company Orelunexa Monitoring, a Google Kubernetes Engine (GKE) cluster must send data to a legacy monitoring service in an on-premises network at 192.168.10.0/24 through Cloud VPN.

At the fictional company Auralexa Systems, you correctly configured Cloud DNS forwarding zones to point to your on-premises DNS servers.

At the fictional company Brinoryx Cloud, you manage a hybrid environment connected to Google Cloud by Cloud VPN.

At the fictional company Ceralith Media, the company’s public domain example.com is hosted in a public Cloud DNS managed zone.

At the fictional company Davorixa Software, software updates are distributed from a Cloud Storage bucket through a global external Application Load Balancer with Cloud CDN enabled.

At the fictional company Elarvanta Applications, you are designing ingress for an internal employee-facing application running on Google Kubernetes Engine (GKE).

At the fictional company Fervoryn Networks, you are establishing hybrid connectivity between an on-premises data center and a Google Cloud VPC network by using Cloud Interconnect.

At the fictional company Bravonix Industries, an on-premises data center is running out of network capacity for a critical application, so you are migrating the application to Google Cloud.

At the fictional company Auralith Apps, you want to protect an application deployed on Google Kubernetes Engine (GKE) with a new Google Cloud Armor security policy.

At the fictional company Quenvara Group, you need connectivity among three VPC networks named Sales, Marketing, and Finance so that users can access resources in all three networks.

At the fictional company Draxelyn Networks, you create multiple Compute Engine VMs that will act as TFTP servers and must receive traffic from clients on the internet.

At the fictional company Pelorixa Communications, you want to load balance an internet-facing standard voice-over-IP (VoIP) application.

At the fictional company Vantoryn Systems, you need network address translation between workloads in a Google Cloud VPC network and address blocks in an on-premises network connected through supported hybrid connectivity.

At the fictional company Elunexa Labs, Compute Engine Linux VMs use metadata-based SSH authentication, OS Login is not enabled, and the VMs do not block project-wide SSH keys.

At the fictional company Corvanta Security, instance-A is in one subnet of a VPC network and a security appliance is in another subnet of the same VPC network.

At the fictional company Myridianix Platforms, you create a private Google Kubernetes Engine (GKE) cluster and use kubectl from a Compute Engine VM to check Pod status.

At the fictional company Zorvella Technologies, the security team manages firewall rules and TLS/SSL certificates, while the networking team manages the remaining Compute Engine networking resources.

At the fictional company Zelvora Networks, you need to configure Border Gateway Protocol (BGP) for a dynamically routed VPN connection between two Google Cloud VPC networks, 10.1.0.0/16 and 172.16.0.0/16.

At the fictional company Dorynth Systems, your on-premises network is connected to a VPC network by a Classic VPN tunnel that uses static routing.

At the fictional company Elarion Cloud, you are designing a Partner Interconnect topology for geo-redundancy across two metropolitan areas.

At the fictional company Arqelune Technologies, you are designing the organization’s network architecture.

At the fictional company Klythera Networks, your organization has 10 separate VPC networks, with one VPC network per project in a single Google Cloud region.

At the fictional company Merynex Industries, you need to configure hybrid DNS with the following requirements.

At the fictional company Velorian Data, your organization uses a hub-and-spoke VPC architecture with critical Compute Engine workloads.

At the fictional company Xenoryn Storage, you have a Cloud Storage bucket containing sensitive data in Google Cloud project XYZ.

At the fictional company Arventis Group, you maintain a Shared VPC in a host project.

At the fictional company Peloryx Infrastructure, your organization has Compute Engine instances in us-east1, us-west2, and us-central1.

At the fictional company Ferlunexa Content, you want Cloud CDN to serve the static object /images/spacetime.png from a private Cloud Storage bucket through an external Application Load Balancer.

At the fictional company Galvoryx Applications, you are deploying an application on a Compute Engine VM.

At the fictional company Havorixa Security, production web servers run in both us-east1 and us-west1 in project prod-servers.

At the fictional company Ilyranta Web, you are preparing to deploy a regional internal Application Load Balancer for Compute Engine VM instance-group backends.

At the fictional company Jorvanta Networks, two redundant Dedicated Interconnect connections, int-lga1 and int-lga2, use separate colocation-facility edge availability domains and separate on-premises routers.

At the fictional company Kervonix Infrastructure, you are migrating an on-premises hub-and-spoke network to Google Cloud as quickly as possible.

At the fictional company Lorynexa Networks, VPC network vpc1 in us-central1 contains Compute Engine workloads and one Cloud Router named mycloudrouter.

At the fictional company Meryvanta Group, you are designing the first private connection between an on-premises data center and a Google Cloud VPC network.

At the fictional company Naverixa Containers, you are planning a Google Kubernetes Engine (GKE) Standard cluster.

At the fictional company Orelunex Gaming, a gaming workload is deployed across us-west2-a, us-west2-b, and us-west2-c.

At the fictional company Galoryn Group, approximately 100 application teams need to manage their own Google Cloud environments in separate projects.

At the fictional company Havorixa Networks, you already have a Network Connectivity Center hub.

At the fictional company Ilyranta Infrastructure, you are connecting one on-premises data center to a Google Cloud VPC network by using IPsec VPN.

At the fictional company Jexoryn Services, a highly available application is not HTTP-based, uses multiple TCP ports, and has backend deployments in multiple Google Cloud regions.

At the fictional company Kervonexa Cloud, the organization uses Shared VPC.

At the fictional company Lumivexa Networks, your organization wants to use HA VPN over Cloud Interconnect so that application traffic is IPsec-encrypted while traversing the Cloud Interconnect connections.

At the fictional company Merynexa Security, you recently became responsible for the organization’s Cloud Next Generation Firewall configuration.

At the fictional company Navorith Infrastructure, an organization uses Shared VPC and is connecting the Shared VPC network to its on-premises data center by using Dedicated Interconnect.

At the fictional company Orelvanta Networks, the on-premises networking team reports frequent BGP session flaps toward Google Cloud.

At the fictional company Avenoryx Group, more than 250 autonomous business units operate in a decentralized model.

At the fictional company Galoryx Web, a global website stores static assets such as images and CSS files in Cloud Storage while dynamic content is served by a managed instance group.

At the fictional company Helyranta Platforms, you are planning a Google Kubernetes Engine (GKE) cluster for several microservices whose compute requirements vary during the day.

At the fictional company Ivorixa Commerce, you are migrating a web application to Google Cloud and enabling Cloud CDN.

At the fictional company Jorynexa Security, production Compute Engine VMs process sensitive user data.

At the fictional company Kervonixa Applications, you are deploying an internal application on Google Kubernetes Engine (GKE).

At the fictional company Lumorixa Networks, you are integrating an on-premises SD-WAN fabric with Google Cloud.

At the fictional company Meryvanta Retail, you are running a canary test for app-v2, which is configured as a separate backend service from the production app-v1 service.

At the fictional company Neralixa Web, app.example.com is publicly available through a global external Application Load Balancer, but employees inside a Google Cloud VPC network must resolve the same hostname to a private internal application address.

At the fictional company Oryvanta Containers, a microservice runs on Google Kubernetes Engine (GKE).

At the fictional company Avarenix Systems, two independent development teams operate separate Google Cloud projects.

At the fictional company Noverixa Systems, you have created an HTTP(S) application that is served through an external Application Load Balancer.

At the fictional company Quellaris Networks, you need to give each member of your network operations team least-privilege access to create, modify, and delete Cloud Interconnect VLAN attachments.

At the fictional company Brintava Software, you have an application running in a managed instance group (MIG).

At the fictional company Zynthera Digital, you deployed a proof-of-concept application by manually placing Compute Engine VM instances in a single zone.

At the fictional company Aerovanta Media, a Cloud Storage bucket contains two objects.

At the fictional company Cendryx Gaming, your company operates a popular gaming service.

At the fictional company Orbelune Applications, your software team is developing an on-premises web application that requires direct private connectivity to Compute Engine VM instances in Google Cloud by using RFC 1918 addresses.

At the fictional company Virelta Commerce, your company has launched a critical revenue-generating web application.

At the fictional company Talmora Data, you are creating a new application whose Compute Engine VM instances have no external IP addresses and must connect privately to Cloud SQL.

At the fictional company Nexivane Industries, you want to use Cloud Interconnect to connect your on-premises network to a Google Cloud VPC network.

At the fictional company Avenrix Security, you recently configured Google Cloud Armor security policies to manage traffic to your application.

At the fictional company Bravelynx Group, you are the Organization Administrator.

At the fictional company Cendrixa Platforms, you recently deployed Compute Engine instances in us-west1 and us-east1 in a VPC network with default routing.

At the fictional company Draxora Digital, you are designing a global application that runs on Compute Engine instances behind a global external Application Load Balancer.

At the fictional company Elvarion Networks, organization security policy requires all ordinary internet-bound traffic from Google Cloud VMs to return to the on-premises data center through HA VPN before internet egress.

At the fictional company Firavex Holdings, the resource hierarchy contains a parent folder with a subfolder for each department.

At the fictional company Gavoryn Data, two Google Cloud projects are already protected by a VPC Service Controls service perimeter.

At the fictional company Heloryx Networks, you are configuring HA VPN between a VPC network and an on-premises network.

At the fictional company Iveranta Systems, you recently installed a Cloud VPN tunnel between your on-premises data center and a Google Cloud VPC network.

At the fictional company Jorvexa Cloud, you need to design the IPv4 ranges for a VPC-native Google Kubernetes Engine (GKE) Standard cluster.

At the fictional company Avelorix Systems, the organization recently migrated workloads to Google Cloud. Department A and Department B use separate VPC networks.

At the fictional company Brinovexa Labs, you are planning to use Terraform to deploy Google Cloud infrastructure.

At the fictional company Ceryntha Cloud, a Compute Engine VM is located in a Shared VPC service project and has two network interfaces. nic0 is connected to Subnet-1, which belongs to the Shared VPC network in the host project.

At the fictional company Draxoryn Networks, you are connecting a Google Cloud VPC network to an on-premises network whose VPN device does not support Border Gateway Protocol (BGP).

At the fictional company Elarvex Analytics, VPC A is in Project A and VPC B is in Project B.

At the fictional company Ferynoxa Systems, you need a VPN tunnel between two Google Cloud VPC networks.

At the fictional company Galoryn Industries, the company is moving to a hybrid-cloud environment and must connect two on-premises data centers to one Google Cloud VPC network.

At the fictional company Helyranta Platforms, an enterprise service currently runs on-premises and uses public IPv4 addresses owned by the company.

At the fictional company Iveronyx Networks, a service provider will manage the organization’s hybrid connectivity from its data center to Google Cloud.

At the fictional company Joryvanta Systems, your application infrastructure runs in us-central1.

At the fictional company Berynthia Applications, you are configuring an Application Load Balancer whose backend servers remain in an on-premises data center connected to Google Cloud through Dedicated Interconnect.

At the fictional company Cavorlyn Networks, Compute Engine workloads access a public SaaS provider through the public internet.

At the fictional company Delyranta Systems, you configured one IPsec Cloud VPN tunnel to a third-party customer.

At the fictional company Erynovex Group, one Shared VPC host project contains a VPC network named SH_VPC.

At the fictional company Faronexa Applications, an application running on a Compute Engine VM intermittently sends a low volume of packets to an on-premises destination through redundant Cloud Interconnect VLAN attachments.

At the fictional company Gelyrion Games, a globally distributed video game binary is delivered through Cloud CDN from a Cloud Storage origin.

At the fictional company Havorlyn Web, your main application uses a global external Application Load Balancer.

At the fictional company Iverexa Commerce, a third-party cloud web application firewall proxies all HTTPS connections from internet users.

At the fictional company Joryntha Payments, a global payment application is publicly reachable as myglobalapp.joryntha.example through a public Cloud DNS zone.

At the fictional company Keralynx AI, you are provisioning Dedicated Interconnect from an on-premises data center in Frankfurt, Germany.

At the fictional company Brinovexa Security, production, development, and testing workloads are isolated in multiple VPC networks.

At the fictional company Ceralith Networks, a VPC network is connected to one on-premises data center through a redundant Dedicated Interconnect topology that qualifies for a 99.9% SLA.

At the fictional company Dorynexa Media, a major news website runs on Cloud Run behind a global external Application Load Balancer with Cloud CDN enabled.

At the fictional company Elarvanta Platforms, a large VPC-native Google Kubernetes Engine (GKE) cluster is exhausting its primary Pod secondary range, 10.100.0.0/16.

At the fictional company Fervoryx Cloud, your organization has limited private IPv4 address space.

At the fictional company Galoryn Media, premium video content is served through a global external Application Load Balancer whose backend is an internet network endpoint group pointing to an on-premises video origin.

At the fictional company Havorixa Networks, an on-premises network connects privately to a Google Cloud VPC.

At the fictional company Iverexa Platforms, multiple teams share one namespace in a Google Kubernetes Engine (GKE) cluster.

At the fictional company Jorynexa Commerce, a rapidly growing application runs on a VPC-native Google Kubernetes Engine (GKE) cluster.

At the fictional company Keralynx Networks, branch office CITY_A connects through an SD-WAN tunnel over the public internet to Compute Engine VM SDWAN_ONE. Branch office CITY_B similarly connects to SDWAN_TWO.

At the fictional company Pyralith Services, you configured a Compute Engine VM instance as a self-managed NAT gateway.

At the fictional company Velmora Networks, you need to configure a custom static route to an on-premises resource behind a Cloud VPN tunnel that uses policy-based static routing.

At the fictional company Kestriva Content, you need to enable Cloud CDN for all objects in a Cloud Storage bucket and make the objects available to internet clients through the CDN.

At the fictional company Lumetrix Streaming, your streaming application in Google Cloud supports multiple languages.

At the fictional company Dravanta Analytics, you want to establish a dedicated connection to Google’s edge network that can reach a Cloud SQL instance through its public IP address, and you do not want to use a third-party connectivity service provider.

At the fictional company Altirune Systems, you are configuring a new Cloud Router in your organization’s Google Cloud environment to provide connectivity across a new Dedicated Interconnect connection to your on-premises data center.

At the fictional company Veltraxis Labs, you created a new VPC network for your development team. You want incoming access to resources in this VPC network to be allowed over SSH only.

At the fictional company Norvanta Networks, your on-premises data center has two routers, each connected to Google Cloud through its own Cloud VPN tunnel.

At the fictional company Cerynox Platforms, you need to define an IP address plan for a future VPC-native Google Kubernetes Engine (GKE) Standard cluster.

At the fictional company Quoralis Media, you created VPC firewall rules that allow only HTTP, HTTPS, and SSH traffic.

At the fictional company Klyranta Applications, you are migrating a three-tier application from on-premises to Google Cloud.

At the fictional company Lumoryx Technologies, your company completed a migration to Google Cloud and now has three VPC networks: Sales, Finance, and Engineering. Each VPC network contains more than 100 Compute Engine instances.

At the fictional company Merovanta Networks, you provisioned Partner Interconnect to extend connectivity from an on-premises data center to Google Cloud.

At the fictional company Norvexis Streaming, you are configuring a new internet-facing application that must support both IPv4 and IPv6, use TCP pass-through on port 443, and run backends in us-west1 and us-east1.

At the fictional company Orynthex Data, project my-project contains two subnets in one VPC network: subnet-a with IP range 10.128.0.0/20 and subnet-b with IP range 172.16.0.0/24.

At the fictional company Qelvarin Systems, you are planning a large application deployment in Google Cloud that includes connectivity to on-premises locations.

At the fictional company Zenthoryx Web, you are configuring VPC firewall access for a group of web servers.

At the fictional company Aurovexa Logistics, you have one Dedicated Interconnect physical connection at a colocation facility closest to us-west2.

At the fictional company Brinovex Cloud, you have a hybrid environment in which a hub VPC network connects to your on-premises network through HA VPN and Cloud Router.

At the fictional company Ceralune Security, the following VPC firewall rules already apply to all VM instances in a VPC network: An egress deny rule for destination 192.0.2.0/24 on TCP port 80 with priority 100.

At the fictional company Kelyrion Infrastructure, you provisioned a Dedicated Interconnect connection with a VLAN attachment and configured Border Gateway Protocol (BGP) between the on-premises router and Cloud Router.

At the fictional company Lorynexa Data, one on-premises data center must connect to a Google Cloud VPC network.

At the fictional company Mavoryn Cloud, the current Google Cloud environment uses a traditional hub-and-spoke design in which workload VPC networks are connected to a central routing VPC by VPC Network Peering.

At the fictional company Neralixa Networks, you are deploying HA VPN between Google Cloud and an on-premises network.

At the fictional company Orynthia Networks, you are implementing a VPC architecture with a Network Connectivity Center hub.

At the fictional company Auralynx Systems, several Compute Engine VMs across multiple VPC networks require outbound internet access, but security policy prohibits external IP addresses on those VMs.

At the fictional company Brintoryx Networks, your organization has five VPC networks in different Google Cloud projects that require high-throughput private connectivity.

At the fictional company Ceralith Data, you are attempting to establish HA VPN to an on-premises network, but the VPN connection does not establish.

At the fictional company Davorixa Games, two applications run in Google Kubernetes Engine (GKE) and are exposed through an external Application Load Balancer created by GKE Ingress.

At the fictional company Elorynth Networks, a multi-region VPC network has an existing HA VPN connection in region 1 to the corporate network.

At the fictional company Lumoryxa Security, classic VPC firewall rules currently deny all egress traffic.

At the fictional company Myrionex Networks, a VPC network uses regional dynamic routing. Compute Engine VMs and Cloud Interconnect VLAN attachments are in europe-west2.

At the fictional company Neralixa Data, workloads in a VPC network need private access to Google APIs including Cloud Storage and BigQuery.

At the fictional company Oryvexa Networks, one IPsec Cloud VPN tunnel to a customer is established, but the BGP session is not configured.

At the fictional company Auralexa Networks, your organization has an on-premises data center.

At the fictional company Brinoryx Web, a web application runs on Compute Engine VM instance groups in multiple Google Cloud regions.

At the fictional company Ceralynx Networks, Network Connectivity Center connects multiple VPC networks in Google Cloud.

At the fictional company Doryvanta Infrastructure, your organization wants to deploy HA VPN over Cloud Interconnect so that application traffic is IPsec-encrypted while traversing Cloud Interconnect.

At the fictional company Elarynth Applications, an internal application named app-1 runs in VPC-1 and consumes services from another internal application named app-2 in VPC-2.

At the fictional company Fervoryx Cloud, you are troubleshooting intermittent connectivity failures between Compute Engine workloads and a public SaaS provider.

At the fictional company Lumorixa Multicloud, applications in Google Cloud and AWS frequently exchange large volumes of data.

At the fictional company Meryvanta Enterprise, many development teams need separate Google Cloud projects in which they can independently create and manage VMs and other application resources.

At the fictional company Navorixa Infrastructure, three separate VPC networks for development, testing, and production must connect to two on-premises data centers through Cloud VPN while remaining isolated from one another.

At the fictional company Orelunexa Security, a central inspection VPC contains a fleet of network virtual appliances behind an internal passthrough Network Load Balancer.

At the fictional company Aerovexa Platforms, you are designing a Google Kubernetes Engine (GKE) cluster for a rapidly scaling microservices application.

At the fictional company Bravoryn Networks, the corporate VPC network vpc-corp and an acquired company’s VPC network vpc-acquired use overlapping subnet address ranges.

At the fictional company Celyranta Infrastructure, you are designing a new Google Kubernetes Engine (GKE) cluster because IPv4 address exhaustion is becoming a long-term concern.

At the fictional company Davorixa Financial, you are designing resilient private connectivity between an on-premises data center and Google Cloud.

At the fictional company Elarvanta Security, you need to inspect all traffic between production-vpc and development-vpc by using a fleet of third-party network virtual appliances that provide intrusion prevention.

At the fictional company Fervoryx Applications, a Google Kubernetes Engine (GKE) cluster runs internal applications.

At the fictional company Bravionix Group, two departments use separate Google Cloud projects named code-dev and data-dev within the same organization.

At the fictional company Teralune Services, you need to create a Google Kubernetes Engine (GKE) cluster in an existing VPC network that is reachable from your on-premises environment through private hybrid connectivity.

At the fictional company Nexoryn Applications, you are configuring an instance group as a backend for an Application Load Balancer and need to create a new health check.

At the fictional company Pyravex Industries, you are in the early stages of planning a migration to Google Cloud and want to test a hybrid-cloud design before production.

At the fictional company Solvanta Networks, you want to create an IPsec tunnel between your on-premises network and a VPC network by using Cloud VPN.

At the fictional company Aurelix Digital, you enabled an external Application Load Balancer for your application.

At the fictional company Kestrion Data, you want to use Partner Interconnect to connect your on-premises network to a Google Cloud VPC network, and you have already selected an Interconnect service provider.

At the fictional company Myravanta Web, you need to centralize Identity and Access Management permissions and email distribution for the WebServices team as efficiently as possible.

At the fictional company Orbelix Security, you use the gcloud CLI to create a project-level custom IAM role by copying permissions from a predefined role.

At the fictional company Zenthara Technologies, a Compute Engine VM in your VPC network has only a private IPv4 address.

At the fictional company Draxivon Data, one Google Cloud project contains multiple VPC networks as well as sensitive Cloud Storage buckets and BigQuery datasets.

At the fictional company Elorynth Software, 2,000 Compute Engine VMs without external IP addresses run in private subnets in us-east1.

At the fictional company Fervanta Networks, an on-premises network contains subnet-a and connects through a VPN gateway to a Google Cloud VPC network.

At the fictional company Galyrix Industries, a hub VPC network connects to the on-premises network through HA VPN and Cloud Router.

At the fictional company Helionexa Platforms, one VPC network already has private hybrid connectivity to an on-premises environment.

At the fictional company Ivoranta Digital, you are deploying containerized microservices on Cloud Run for customers distributed around the world.

At the fictional company Jexoryn Services, you have an HA VPN design with two tunnels configured in an active/passive arrangement.

At the fictional company Kaldrexa Infrastructure, two network virtual appliance VMs in us-central1 provide routed connectivity to an on-premises network whose destination range is 10.0.0.0/8.

At the fictional company Lumivanta Analytics, Compute Engine VMs without external IP addresses must use Private Google Access to reach Cloud Storage.

At the fictional company Myrionex Cloud, you have a hub-and-spoke VPC architecture.

At the fictional company Fervonix Group, you are designing a landing-zone architecture with these requirements.

At the fictional company Galenoryx Compute, Compute Engine VMs are directly reachable from the public internet.

At the fictional company Havorenta Finance, frontend application VMs and backend database VMs are in different subnets of the same VPC network.

At the fictional company Iverexa Networks, you are designing 99.9%-availability hybrid connectivity with redundant VLAN attachments that terminate on one Cloud Router.

At the fictional company Joralith Security, you are implementing network controls in a newly created VPC network.

At the fictional company Kalyvexa Security, you are configuring the intrusion prevention service in Cloud Next Generation Firewall Enterprise.

At the fictional company Lumerion Services, several services are exposed through a global external Application Load Balancer.

At the fictional company Merovexa Networks, two VPC networks are connected through a dual-NIC Compute Engine VM that acts as a bump-in-the-wire firewall.

At the fictional company Neralith Security, your company deployed Cloud Next Generation Firewall Enterprise.

At the fictional company Oryvanta Cloud, you recently became responsible for the organization’s Google Cloud network security configuration.

At the fictional company Galeryn Platforms, you are designing a VPC-native Google Kubernetes Engine (GKE) Standard cluster.

At the fictional company Havorinta Networks, you are establishing a secure and resilient connection between an on-premises data center and a Google Cloud VPC network.

At the fictional company Iverexa Finance, you are designing a Google Kubernetes Engine (GKE) cluster for a highly sensitive financial application in a Shared VPC network.

At the fictional company Jorvanta Security, cloud traffic is inspected by a third-party network virtual appliance.

At the fictional company Keralixa Networks, one Network Connectivity Center VPC spoke contains subnet-corp-prod at 10.10.1.0/24 and subnet-corp-test at 192.168.1.0/24.

At the fictional company Lumoryn Infrastructure, Dedicated Interconnect is critical to hybrid connectivity.

At the fictional company Mervanta Media, your organization is migrating workloads from AWS to Google Cloud.

At the fictional company Neryvexa Containers, multiple Google Kubernetes Engine (GKE) clusters are deployed in separate VPC networks, one cluster per VPC.

At the fictional company Oryvanta Networks, Network Connectivity Center connects many VPC spokes.

At the fictional company Auralith Systems, you are designing networking for a hybrid environment in which applications in Google Cloud and services in an on-premises network must resolve each other’s private DNS records.

At the fictional company Galeryn Commerce, you are designing a critical multi-tier application that must survive the loss of a Google Cloud region.

At the fictional company Havorixa Networks, two geographically separated on-premises data centers, datacenter-east and datacenter-west, must exchange large volumes of private traffic through Google’s backbone.

At the fictional company Ilyranta Security, you maintain a large set of VPC firewall rules across many projects.

At the fictional company Jorvexa Enterprise, dev-vpc and prod-vpc are separate VPC networks in different projects.

At the fictional company Keralynx Cloud, an enterprise is migrating applications to Google Cloud.

At the fictional company Lumorixa Data, a Network Connectivity Center hub connects landing-zone-vpc and prod-vpc as VPC spokes.

At the fictional company Meryvanta Networks, an on-premises data center is connected to a Google Cloud VPC network through Cloud Interconnect.

At the fictional company Navorixa Games, you are designing a global application.

At the fictional company Oryvexa Infrastructure, a critical application depends on Dedicated Interconnect between an on-premises data center and a Google Cloud VPC network.

At the fictional company Bravelyra Systems, resources in two different VPC networks, each in a different Google Cloud project, require private connectivity.