At Mirelune Software, you are extending a working automation workflow that authenticates as a service account.

GCP Google Cloud Professional Cloud Network Engineer Practice Questions At Mirelune Software, you are extending a working automation workflow that authenticates as a service account.

GCP Google Cloud Professional Cloud Network Engineer Practice Questions

0% Completed

Premium Set: 1 [ + Detailed Explanations] Free Preview

At the fictional company Ventoryx Digital, you are deploying a global external TCP load-balancing solution and want to preserve the source IP address of the original Layer 3 packet.

Reading

At the fictional company Doryvex Holdings, your organization uses Shared VPC with one host project and three service projects.

Reading

At the fictional company Iverona Workspace, you are designing a new connectivity solution for the enterprise network to access Google Workspace.

Reading

At the fictional company Zorvanta Security, the organization has a new security policy requiring you to monitor the payloads of all egress traffic from virtual machines in region us-west2.

Reading

At the fictional company Fervonix Security, your organization is introducing new internet-egress controls.

Reading

At Brinova Digital, you are increasing use of an existing statically routed Cloud VPN connection between an on-premises network and Google Cloud.

Reading

At Velmora Games, a popular online gaming service runs on Compute Engine instances that have only private IP addresses.

Reading

After a network change window at the fictional company Ravelune Systems, one of the company's applications stops working.

Reading

At Nimbrel Systems, an administrator is migrating several on-premises backend servers for an application to Google Cloud.

Reading

At the fictional company Brinovexa Group, your company acquired a new division.

Reading

At the fictional company Elyvanta Group, all inbound SMTP traffic to the organization's Google Cloud environment must be blocked except traffic originating from the corporate network.

Reading

At the fictional company Elvarix Networks, you need to create a new VPC network that allows instances to have IP addresses in both the 10.1.1.0/24 network and the 172.16.45.0/24 network.

Reading

At the fictional company Kervonixa Apps, two applications run in separate Google Cloud VPC networks, vpc-a and vpc-b, in different projects.

Reading

At the fictional company Brevanta Systems, your organization has a single VPC network in Google Cloud that is connected to on-premises locations by Cloud Interconnect.

Reading

At Caldris Media, you are disabling DNSSEC for a Cloud DNS public managed zone. You removed what you believed were the relevant DS records from the managed-zone configuration, waited for cached data to expire, and then disabled DNSSEC on the zone.

Reading

At the fictional company Elyranta Global, you need a high-throughput, reliable, private connection between an on-premises data center in Frankfurt and a Google Cloud VPC network in europe-west3.

Reading

At Auralink Commerce, a web application is hosted only in the us-central1 region. Users traveling in Asia experience high latency.

Reading

At the fictional company Galyrex Infrastructure, you are implementing hybrid connectivity by using redundant Dedicated Interconnect connections.

Reading

At the fictional company Helyranta Applications, your team is developing an application for users around the world.

Reading

At the fictional company Fervoryn Applications, a subset of applications in multiple Google Cloud regions requires internet access.

Reading

At Pinevora Analytics, an application runs on Compute Engine and calls BigQuery to generate results that are written to Cloud Storage.

Reading

At the fictional company Cynerexa Cloud, your organization recently re-architected its environment to use Network Connectivity Center.

Reading

At the fictional company Teralith Commerce, you are configuring load balancing for a standard three-tier application consisting of web, application, and database tiers.

Reading

At Novalith Services, an application on a Compute Engine VM cannot communicate with a resource outside its subnet.

Reading

At Orivanta Labs, you configure Public NAT by using Cloud NAT for a VPC subnet.

Reading

At the fictional company Ilyranta Security, you suspect that one Compute Engine VM in a production subnet has been compromised because it is communicating with a malicious external IP address.

Reading

At the fictional company Fervoryx Services, a Google Cloud service communicates with an on-premises service through Dedicated Interconnect.

Reading

At the fictional company Jorynexa Commerce, shop.example.com is a global application with independent deployments in us-central1, europe-west1, and asia-east1.

Reading

At the fictional company Dovaryx Media, the networking team recently enabled Cloud CDN for an external-facing service exposed through an external Application Load Balancer.

Reading

At the fictional company Arvionex Networks, you configured Cloud VPN with dynamic routing by using Border Gateway Protocol (BGP).

Reading

At the fictional company Galyrex Finance, a newly provisioned 10-Gbps Dedicated Interconnect connects an on-premises data center to a Google Cloud VPC network.

Reading

At the fictional company Javorenta Security, the security team has discovered a high risk of malicious activity originating from internet-connected VMs.

Reading

At the fictional company Jorvexis Security, you suspect that one Compute Engine VM in the default VPC network is receiving a denial-of-service attack.

Reading

At the fictional company Quorinex Financial, the company has a single VPC network deployed in Google Cloud with access from its on-premises network through Cloud Interconnect.

Reading

At Kestrelune Networks, two Cloud Router BGP paths connect Google Cloud to the same on-premises prefixes.

Reading

At the fictional company Galdryne Media, you are configuring a new externally available HTTP application.

Reading

At the fictional company Keryvanta Networks, the organization uses a hub-and-spoke architecture based on VPC Network Peering, and hybrid connectivity is centralized in the hub VPC.

Reading

At the fictional company Celyrion Group, your organization has one VPC network with subnets in us-east1, us-west4, and europe-west4.

Reading

At the fictional company Caldriva Software, you are developing an HTTP API hosted on a Compute Engine virtual machine instance that must be invoked only by multiple clients within the same VPC network.

Reading

At the fictional company Havorixa Commerce, a global e-commerce website uses Cloud CDN.

Reading

At the fictional company Elarvanta Security, you are implementing a new network security policy for two Compute Engine VMs in the same VPC network.

Reading

At the fictional company Asteronix Networks, the cloud network has hybrid connectivity to an on-premises environment through Cloud Interconnect in two regions, us-east4 and us-west1.

Reading

At the fictional company Veridianex Networks, you recently deployed Cloud VPN to connect your on-premises data center to Google Cloud.

Reading

At the fictional company Ceralynx Finance, a critical project requires highly available encrypted connectivity to an on-premises network.

Reading

At the fictional company Ardelune Security, the security team prefers managed services whenever possible.

Reading

At the fictional company Heloryx Data, multiple Compute Engine VMs in a VPC network have only internal IP addresses and must reach Cloud Storage APIs privately.

Reading

At the fictional company Ilyrion Cloud, resources have recently been migrated from on-premises to Google Cloud.

Reading

At the fictional company Nimbrelis Platforms, you are configuring your Google Cloud environment to connect to your on-premises network.

Reading

At Tessara Webworks, you use Cloud CDN with an external Application Load Balancer to serve cacheable content.

Reading

At the fictional company Davorixa Media, you manage static assets for a global website.

Reading

Premium Set: 2 [ + Detailed Explanations] Free Preview

At the fictional company Ceralyn Data, organization policy requires all internal IP addresses used by database Compute Engine VMs to be statically reserved.

Reading

At the fictional company Navorixa Banking, a critical application in a Google Cloud VPC network communicates frequently with a Cloud SQL for MySQL instance containing sensitive customer data.

Reading

At the fictional company Brinoryx Cloud, you manage a hybrid environment connected to Google Cloud by Cloud VPN.

Reading

At the fictional company Noryvex Microservices, you have several microservices running on private IP addresses in an existing VPC network.

Reading

At Quendaris Technologies, you use Infrastructure Manager with Terraform configurations to deploy Google Cloud infrastructure.

Reading

At the fictional company Davorixa Software, software updates are distributed from a Cloud Storage bucket through a global external Application Load Balancer with Cloud CDN enabled.

Reading

At the fictional company Lumeraxis Web, you need to create the network infrastructure for a highly available web application deployed in the us-east1 and us-west1 regions.

Reading

At the fictional company Lumorexa Systems, an on-premises VPN device supports only IKEv1 and does not support BGP.

Reading

At Solvexa Holdings, you manage Identity and Access Management across several Google Cloud projects and want to use scripting or API-based automation wherever possible.

Reading

At the fictional company Asterivia Systems, you are implementing a Shared VPC network for an organization with distributed application teams.

Reading

At the fictional company Velquora Systems, you are designing a multinational environment that is moving to Google Cloud.

Reading

At the fictional company Meryvanta Finance, a fleet of Compute Engine VMs processes sensitive financial data and must call the Cloud Storage API.

Reading

At the fictional company Orvexa Media, you deployed a global external Application Load Balancer, but health checks to TCP port 80 on a Compute Engine VM backend are failing and the load balancer does not send application traffic to that backend.

Reading

At the fictional company Brinovara Networks, you are configuring HA VPN between an on-premises environment and a Google Cloud VPC network.

Reading

At the fictional company Lumorixa Networks, multiple Cloud VPN tunnels connect a Google Cloud VPC network to one branch office.

Reading

At the fictional company Evoranta Cloud, you are designing new private Google Kubernetes Engine (GKE) Standard clusters.

Reading

At the fictional company Orelunexa Monitoring, a Google Kubernetes Engine (GKE) cluster must send data to a legacy monitoring service in an on-premises network at 192.168.10.0/24 through Cloud VPN.

Reading

At the fictional company Brelunex Platforms, a private Google Kubernetes Engine (GKE) cluster named customer-1-cluster is deployed in us-central1-c.

Reading

At the fictional company Auralexa Systems, you correctly configured Cloud DNS forwarding zones to point to your on-premises DNS servers.

Reading

At the fictional company Pyravon Data, you are the network administrator responsible for hybrid connectivity.

Reading

At the fictional company Olyranta Platforms, application teams are migrating services to Google Kubernetes Engine (GKE).

Reading

At the fictional company Ceralith Media, the company's public domain example.com is hosted in a public Cloud DNS managed zone.

Reading

At the fictional company Cavorixa Media, the same company logo image is served through Cloud CDN on multiple company-owned websites that use different hostnames.

Reading

At the fictional company Astralune Analytics, you recently noticed a recurring daily spike in network usage in your Google Cloud project.

Reading

At the fictional company Orbynex Cloud, you have applications running in the us-west1 and us-east1 regions.

Reading

At Arclumen Data, your on-premises network has a 10-Gbps Direct Peering connection to Google.

Reading

At the fictional company Ardelixa Networks, you have a VPC network with two Dedicated Interconnect connections in different regions: us-west1 and us-east1.

Reading

At the fictional company Dorynexa Security, you deployed a mission-critical application in its own Google Cloud project and configured a Cloud Next Generation Firewall Enterprise threat-prevention security profile that uses the default threat signatures.

Reading

At the fictional company Elarvanta Applications, you are designing ingress for an internal employee-facing application running on Google Kubernetes Engine (GKE).

Reading

At the fictional company Feronix Group, the company has separate VPC networks in a single region for two departments: Sales and Finance.

Reading

At the fictional company Nimbryx Labs, you are designing a Google Kubernetes Engine (GKE) cluster.

Reading

At Mirelune Software, you are extending a working automation workflow that authenticates as a service account.

Reading

At the fictional company Tervexa Media, a Cloud Storage bucket is used as a Cloud CDN backend.

Reading

At the fictional company Lumerixa Services, you are designing a TCP application whose backend servers listen internally on TCP port 800.

Reading

At the fictional company Navorixa AI, the organization uses Gemini Enterprise Agent Platform online inference in us-central1.

Reading

At the fictional company Navorin Labs, you have a hub-and-spoke architecture in which each spoke VPC network is connected only to a central hub VPC network by VPC Network Peering.

Reading

At the fictional company Mervonix Security, you plan to deploy Google Cloud Armor security policies that use preconfigured web application firewall rules.

Reading

At the fictional company Orvanta Messaging, operations have expanded from EMEA into APAC.

Reading

At the fictional company Orlentra Infrastructure, you have a Dedicated Interconnect connection with 20 Gbps of physical connection capacity and one VLAN attachment currently configured with a maximum capacity of 10 Gbps.

Reading

At the fictional company Mavoryx Games, you are reviewing and tuning Secure Web Proxy.

Reading

At the fictional company Elvarion Multicloud, you are configuring Cross-Cloud Interconnect connectivity from Google Cloud to two cloud service providers, CSP 1 and CSP 2.

Reading

At the fictional company Ferlunexa Applications, a VPC-native Google Kubernetes Engine (GKE) Standard cluster uses nodes with external IP addresses.

Reading

At the fictional company Pyravelle Group, your Google Cloud organization contains two folders named Dev and Prod.

Reading

At the fictional company Velyrix Systems, you need to enable Private Google Access for some subnets in a Virtual Private Cloud (VPC) network.

Reading

At the fictional company Koryvanta Cloud, your security team requires the following SSH policy across every project and VPC network in the Google Cloud organization.

Reading

At Straventa Group, you are designing a Shared VPC architecture for Production and Staging departments.

Reading

At the fictional company Klyrion Works, your organization is collaborating with a partner to deliver a customer solution.

Reading

At the fictional company Fervoryn Networks, you are establishing hybrid connectivity between an on-premises data center and a Google Cloud VPC network by using Cloud Interconnect.

Reading

At the fictional company Delyrion Systems, two departments use separate VPC networks in one Google Cloud region.

Reading

At the fictional company Calytrix Applications, you recently deployed an application in Google Cloud.

Reading

Premium Set: 3 [ + Detailed Explanations]

At the fictional company Galoryx Web, a global website stores static assets such as images and CSS files in Cloud Storage while dynamic content is served by a managed instance group.

Reading

At the fictional company Ilyranta Infrastructure, you are connecting one on-premises data center to a Google Cloud VPC network by using IPsec VPN.

Reading

At the fictional company Jorvanta Networks, two redundant Dedicated Interconnect connections, int-lga1 and int-lga2, use separate colocation-facility edge availability domains and separate on-premises routers.

Reading

At the fictional company Oryvanta Containers, a microservice runs on Google Kubernetes Engine (GKE).

Reading

At the fictional company Myridianix Platforms, you create a private Google Kubernetes Engine (GKE) cluster and use kubectl from a Compute Engine VM to check Pod status.

Reading

At the fictional company Lumorixa Networks, you are integrating an on-premises SD-WAN fabric with Google Cloud.

Reading

At the fictional company Pelorixa Communications, you want to load balance an internet-facing standard voice-over-IP (VoIP) application.

Reading

At the fictional company Helyranta Platforms, you are planning a Google Kubernetes Engine (GKE) cluster for several microservices whose compute requirements vary during the day.

Reading

At the fictional company Vantoryn Systems, you need network address translation between workloads in a Google Cloud VPC network and address blocks in an on-premises network connected through supported hybrid connectivity.

Reading

At the fictional company Arqelune Technologies, you are designing the organization's network architecture.

Reading

At the fictional company Havorixa Networks, you already have a Network Connectivity Center hub.

Reading

At the fictional company Jexoryn Services, a highly available application is not HTTP-based, uses multiple TCP ports, and has backend deployments in multiple Google Cloud regions.

Reading

At the fictional company Elarion Cloud, you are designing a Partner Interconnect topology for geo-redundancy across two metropolitan areas.

Reading

At the fictional company Corvanta Security, instance-A is in one subnet of a VPC network and a security appliance is in another subnet of the same VPC network.

Reading

At the fictional company Ferlunexa Content, you want Cloud CDN to serve the static object /images/spacetime.png from a private Cloud Storage bucket through an external Application Load Balancer.

Reading

At the fictional company Ilyranta Web, you are preparing to deploy a regional internal Application Load Balancer for Compute Engine VM instance-group backends.

Reading

At the fictional company Havorixa Security, production web servers run in both us-east1 and us-west1 in project prod-servers.

Reading

At the fictional company Galoryn Group, approximately 100 application teams need to manage their own Google Cloud environments in separate projects.

Reading

At the fictional company Orelvanta Networks, the on-premises networking team reports frequent BGP session flaps toward Google Cloud.

Reading

At the fictional company Merynex Industries, you need to configure hybrid DNS with the following requirements.

Reading

At the fictional company Xenoryn Storage, you have a Cloud Storage bucket containing sensitive data in Google Cloud project XYZ.

Reading

At the fictional company Kervonexa Cloud, the organization uses Shared VPC.

Reading

At the fictional company Jorynexa Security, production Compute Engine VMs process sensitive user data.

Reading

At the fictional company Klythera Networks, your organization has 10 separate VPC networks, with one VPC network per project in a single Google Cloud region.

Reading

At the fictional company Galvoryx Applications, you are deploying an application on a Compute Engine VM.

Reading

At the fictional company Quenvara Group, you need connectivity among three VPC networks named Sales, Marketing, and Finance so that users can access resources in all three networks.

Reading

At the fictional company Meryvanta Group, you are designing the first private connection between an on-premises data center and a Google Cloud VPC network.

Reading

At the fictional company Meryvanta Retail, you are running a canary test for app-v2, which is configured as a separate backend service from the production app-v1 service.

Reading

At the fictional company Dorynth Systems, your on-premises network is connected to a VPC network by a Classic VPN tunnel that uses static routing.

Reading

At the fictional company Orelunex Gaming, a gaming workload is deployed across us-west2-a, us-west2-b, and us-west2-c.

Reading

At the fictional company Velorian Data, your organization uses a hub-and-spoke VPC architecture with critical Compute Engine workloads.

Reading

At the fictional company Kervonixa Applications, you are deploying an internal application on Google Kubernetes Engine (GKE).

Reading

At the fictional company Navorith Infrastructure, an organization uses Shared VPC and is connecting the Shared VPC network to its on-premises data center by using Dedicated Interconnect.

Reading

At the fictional company Naverixa Containers, you are planning a Google Kubernetes Engine (GKE) Standard cluster.

Reading

At the fictional company Neralixa Web, app.example.com is publicly available through a global external Application Load Balancer, but employees inside a Google Cloud VPC network must resolve the same hostname to a private internal application address.

Reading

At the fictional company Arventis Group, you maintain a Shared VPC in a host project.

Reading

At the fictional company Zelvora Networks, you need to configure Border Gateway Protocol (BGP) for a dynamically routed VPN connection between two Google Cloud VPC networks, 10.1.0.0/16 and 172.16.0.0/16.

Reading

At the fictional company Avarenix Systems, two independent development teams operate separate Google Cloud projects.

Reading

At the fictional company Elunexa Labs, Compute Engine Linux VMs use metadata-based SSH authentication, OS Login is not enabled, and the VMs do not block project-wide SSH keys.

Reading

At the fictional company Peloryx Infrastructure, your organization has Compute Engine instances in us-east1, us-west2, and us-central1.

Reading

At the fictional company Lorynexa Networks, VPC network vpc1 in us-central1 contains Compute Engine workloads and one Cloud Router named mycloudrouter.

Reading

At the fictional company Avenoryx Group, more than 250 autonomous business units operate in a decentralized model.

Reading

At the fictional company Bravonix Industries, an on-premises data center is running out of network capacity for a critical application, so you are migrating the application to Google Cloud.

Reading

At the fictional company Lumivexa Networks, your organization wants to use HA VPN over Cloud Interconnect so that application traffic is IPsec-encrypted while traversing the Cloud Interconnect connections.

Reading

At the fictional company Draxelyn Networks, you create multiple Compute Engine VMs that will act as TFTP servers and must receive traffic from clients on the internet.

Reading

At the fictional company Kervonix Infrastructure, you are migrating an on-premises hub-and-spoke network to Google Cloud as quickly as possible.

Reading

At the fictional company Ivorixa Commerce, you are migrating a web application to Google Cloud and enabling Cloud CDN.

Reading

At the fictional company Auralith Apps, you want to protect an application deployed on Google Kubernetes Engine (GKE) with a new Google Cloud Armor security policy.

Reading

At the fictional company Merynexa Security, you recently became responsible for the organization's Cloud Next Generation Firewall configuration.

Reading

At the fictional company Zorvella Technologies, the security team manages firewall rules and TLS/SSL certificates, while the networking team manages the remaining Compute Engine networking resources.

Reading

Premium Set: 4 [ + Detailed Explanations]

At the fictional company Noverixa Systems, you have created an HTTP(S) application that is served through an external Application Load Balancer.

Reading

At the fictional company Draxora Digital, you are designing a global application that runs on Compute Engine instances behind a global external Application Load Balancer.

Reading

At the fictional company Talmora Data, you are creating a new application whose Compute Engine VM instances have no external IP addresses and must connect privately to Cloud SQL.

Reading

At the fictional company Faronexa Applications, an application running on a Compute Engine VM intermittently sends a low volume of packets to an on-premises destination through redundant Cloud Interconnect VLAN attachments.

Reading

At the fictional company Virelta Commerce, your company has launched a critical revenue-generating web application.

Reading

At the fictional company Dorynexa Media, a major news website runs on Cloud Run behind a global external Application Load Balancer with Cloud CDN enabled.

Reading

At the fictional company Cavorlyn Networks, Compute Engine workloads access a public SaaS provider through the public internet.

Reading

At the fictional company Avenrix Security, you recently configured Google Cloud Armor security policies to manage traffic to your application.

Reading

At the fictional company Bravelynx Group, you are the Organization Administrator.

Reading

At the fictional company Gavoryn Data, two Google Cloud projects are already protected by a VPC Service Controls service perimeter.

Reading

At the fictional company Avelorix Systems, the organization recently migrated workloads to Google Cloud. Department A and Department B use separate VPC networks.

Reading

At the fictional company Nexivane Industries, you want to use Cloud Interconnect to connect your on-premises network to a Google Cloud VPC network.

Reading

At the fictional company Zynthera Digital, you deployed a proof-of-concept application by manually placing Compute Engine VM instances in a single zone.

Reading

At the fictional company Elvarion Networks, organization security policy requires all ordinary internet-bound traffic from Google Cloud VMs to return to the on-premises data center through HA VPN before internet egress.

Reading

At the fictional company Gelyrion Games, a globally distributed video game binary is delivered through Cloud CDN from a Cloud Storage origin.

Reading

At the fictional company Elarvanta Platforms, a large VPC-native Google Kubernetes Engine (GKE) cluster is exhausting its primary Pod secondary range, 10.100.0.0/16.

Reading

At the fictional company Jorynexa Commerce, a rapidly growing application runs on a VPC-native Google Kubernetes Engine (GKE) cluster.

Reading

At the fictional company Cendrixa Platforms, you recently deployed Compute Engine instances in us-west1 and us-east1 in a VPC network with default routing.

Reading

At the fictional company Ferynoxa Systems, you need a VPN tunnel between two Google Cloud VPC networks.

Reading

At the fictional company Keralynx AI, you are provisioning Dedicated Interconnect from an on-premises data center in Frankfurt, Germany.

Reading

At the fictional company Fervoryx Cloud, your organization has limited private IPv4 address space.

Reading

At the fictional company Quellaris Networks, you need to give each member of your network operations team least-privilege access to create, modify, and delete Cloud Interconnect VLAN attachments.

Reading

At the fictional company Heloryx Networks, you are configuring HA VPN between a VPC network and an on-premises network.

Reading

At the fictional company Helyranta Platforms, an enterprise service currently runs on-premises and uses public IPv4 addresses owned by the company.

Reading

At the fictional company Jorvexa Cloud, you need to design the IPv4 ranges for a VPC-native Google Kubernetes Engine (GKE) Standard cluster.

Reading

At the fictional company Iverexa Platforms, multiple teams share one namespace in a Google Kubernetes Engine (GKE) cluster.

Reading

At the fictional company Elarvex Analytics, VPC A is in Project A and VPC B is in Project B.

Reading

At the fictional company Firavex Holdings, the resource hierarchy contains a parent folder with a subfolder for each department.

Reading

At the fictional company Cendryx Gaming, your company operates a popular gaming service.

Reading

At the fictional company Erynovex Group, one Shared VPC host project contains a VPC network named SH_VPC.

Reading

At the fictional company Havorixa Networks, an on-premises network connects privately to a Google Cloud VPC.

Reading

At the fictional company Draxoryn Networks, you are connecting a Google Cloud VPC network to an on-premises network whose VPN device does not support Border Gateway Protocol (BGP).

Reading

At the fictional company Havorlyn Web, your main application uses a global external Application Load Balancer.

Reading

At the fictional company Galoryn Media, premium video content is served through a global external Application Load Balancer whose backend is an internet network endpoint group pointing to an on-premises video origin.

Reading

At the fictional company Brinovexa Labs, you are planning to use Terraform to deploy Google Cloud infrastructure.

Reading

At the fictional company Ceralith Networks, a VPC network is connected to one on-premises data center through a redundant Dedicated Interconnect topology that qualifies for a 99.9% SLA.

Reading

At the fictional company Keralynx Networks, branch office CITY_A connects through an SD-WAN tunnel over the public internet to Compute Engine VM SDWAN_ONE. Branch office CITY_B similarly connects to SDWAN_TWO.

Reading

At the fictional company Ceryntha Cloud, a Compute Engine VM is located in a Shared VPC service project and has two network interfaces. nic0 is connected to Subnet-1, which belongs to the Shared VPC network in the host project.

Reading

At the fictional company Brinovexa Security, production, development, and testing workloads are isolated in multiple VPC networks.

Reading

At the fictional company Iveranta Systems, you recently installed a Cloud VPN tunnel between your on-premises data center and a Google Cloud VPC network.

Reading

At the fictional company Galoryn Industries, the company is moving to a hybrid-cloud environment and must connect two on-premises data centers to one Google Cloud VPC network.

Reading

At the fictional company Aerovanta Media, a Cloud Storage bucket contains two objects.

Reading

At the fictional company Brintava Software, you have an application running in a managed instance group (MIG).

Reading

At the fictional company Orbelune Applications, your software team is developing an on-premises web application that requires direct private connectivity to Compute Engine VM instances in Google Cloud by using RFC 1918 addresses.

Reading

At the fictional company Joryvanta Systems, your application infrastructure runs in us-central1.

Reading

At the fictional company Delyranta Systems, you configured one IPsec Cloud VPN tunnel to a third-party customer.

Reading

At the fictional company Iveronyx Networks, a service provider will manage the organization's hybrid connectivity from its data center to Google Cloud.

Reading

At the fictional company Berynthia Applications, you are configuring an Application Load Balancer whose backend servers remain in an on-premises data center connected to Google Cloud through Dedicated Interconnect.

Reading

At the fictional company Joryntha Payments, a global payment application is publicly reachable as myglobalapp.joryntha.example through a public Cloud DNS zone.

Reading

At the fictional company Iverexa Commerce, a third-party cloud web application firewall proxies all HTTPS connections from internet users.

Reading

Premium Set: 5 [ + Detailed Explanations]

At the fictional company Neralixa Data, workloads in a VPC network need private access to Google APIs including Cloud Storage and BigQuery.

Reading

At the fictional company Dravanta Analytics, you want to establish a dedicated connection to Google's edge network that can reach a Cloud SQL instance through its public IP address, and you do not want to use a third-party connectivity service provider.

Reading

At the fictional company Auralynx Systems, several Compute Engine VMs across multiple VPC networks require outbound internet access, but security policy prohibits external IP addresses on those VMs.

Reading

At the fictional company Ceralith Data, you are attempting to establish HA VPN to an on-premises network, but the VPN connection does not establish.

Reading

At the fictional company Ceralune Security, the following VPC firewall rules already apply to all VM instances in a VPC network: An egress deny rule for destination 192.0.2.0/24 on TCP port 80 with priority 100.

Reading

At the fictional company Norvanta Networks, your on-premises data center has two routers, each connected to Google Cloud through its own Cloud VPN tunnel.

Reading

At the fictional company Fervoryx Cloud, you are troubleshooting intermittent connectivity failures between Compute Engine workloads and a public SaaS provider.

Reading

At the fictional company Oryvexa Networks, one IPsec Cloud VPN tunnel to a customer is established, but the BGP session is not configured.

Reading

At the fictional company Velmora Networks, you need to configure a custom static route to an on-premises resource behind a Cloud VPN tunnel that uses policy-based static routing.

Reading

At the fictional company Orynthex Data, project my-project contains two subnets in one VPC network: subnet-a with IP range 10.128.0.0/20 and subnet-b with IP range 172.16.0.0/24.

Reading

At the fictional company Lumetrix Streaming, your streaming application in Google Cloud supports multiple languages.

Reading

At the fictional company Aurovexa Logistics, you have one Dedicated Interconnect physical connection at a colocation facility closest to us-west2.

Reading

At the fictional company Lumoryxa Security, classic VPC firewall rules currently deny all egress traffic.

Reading

At the fictional company Elarynth Applications, an internal application named app-1 runs in VPC-1 and consumes services from another internal application named app-2 in VPC-2.

Reading

At the fictional company Klyranta Applications, you are migrating a three-tier application from on-premises to Google Cloud.

Reading

At the fictional company Cerynox Platforms, you need to define an IP address plan for a future VPC-native Google Kubernetes Engine (GKE) Standard cluster.

Reading

At the fictional company Brinovex Cloud, you have a hybrid environment in which a hub VPC network connects to your on-premises network through HA VPN and Cloud Router.

Reading

At the fictional company Auralexa Networks, your organization has an on-premises data center.

Reading

At the fictional company Mavoryn Cloud, the current Google Cloud environment uses a traditional hub-and-spoke design in which workload VPC networks are connected to a central routing VPC by VPC Network Peering.

Reading

At the fictional company Davorixa Games, two applications run in Google Kubernetes Engine (GKE) and are exposed through an external Application Load Balancer created by GKE Ingress.

Reading

At the fictional company Celyranta Infrastructure, you are designing a new Google Kubernetes Engine (GKE) cluster because IPv4 address exhaustion is becoming a long-term concern.

Reading

At the fictional company Orelunexa Security, a central inspection VPC contains a fleet of network virtual appliances behind an internal passthrough Network Load Balancer.

Reading

At the fictional company Lumoryx Technologies, your company completed a migration to Google Cloud and now has three VPC networks: Sales, Finance, and Engineering. Each VPC network contains more than 100 Compute Engine instances.

Reading

At the fictional company Zenthoryx Web, you are configuring VPC firewall access for a group of web servers.

Reading

At the fictional company Fervoryx Applications, a Google Kubernetes Engine (GKE) cluster runs internal applications.

Reading

At the fictional company Ceralynx Networks, Network Connectivity Center connects multiple VPC networks in Google Cloud.

Reading

At the fictional company Neralixa Networks, you are deploying HA VPN between Google Cloud and an on-premises network.

Reading

At the fictional company Quoralis Media, you created VPC firewall rules that allow only HTTP, HTTPS, and SSH traffic.

Reading

At the fictional company Brinoryx Web, a web application runs on Compute Engine VM instance groups in multiple Google Cloud regions.

Reading

At the fictional company Kelyrion Infrastructure, you provisioned a Dedicated Interconnect connection with a VLAN attachment and configured Border Gateway Protocol (BGP) between the on-premises router and Cloud Router.

Reading

At the fictional company Bravoryn Networks, the corporate VPC network vpc-corp and an acquired company's VPC network vpc-acquired use overlapping subnet address ranges.

Reading

At the fictional company Elarvanta Security, you need to inspect all traffic between production-vpc and development-vpc by using a fleet of third-party network virtual appliances that provide intrusion prevention.

Reading

At the fictional company Merovanta Networks, you provisioned Partner Interconnect to extend connectivity from an on-premises data center to Google Cloud.

Reading

At the fictional company Altirune Systems, you are configuring a new Cloud Router in your organization's Google Cloud environment to provide connectivity across a new Dedicated Interconnect connection to your on-premises data center.

Reading

At the fictional company Doryvanta Infrastructure, your organization wants to deploy HA VPN over Cloud Interconnect so that application traffic is IPsec-encrypted while traversing Cloud Interconnect.

Reading

At the fictional company Aerovexa Platforms, you are designing a Google Kubernetes Engine (GKE) cluster for a rapidly scaling microservices application.

Reading

At the fictional company Orynthia Networks, you are implementing a VPC architecture with a Network Connectivity Center hub.

Reading

At the fictional company Kestriva Content, you need to enable Cloud CDN for all objects in a Cloud Storage bucket and make the objects available to internet clients through the CDN.

Reading

At the fictional company Pyralith Services, you configured a Compute Engine VM instance as a self-managed NAT gateway.

Reading

At the fictional company Lumorixa Multicloud, applications in Google Cloud and AWS frequently exchange large volumes of data.

Reading

At the fictional company Qelvarin Systems, you are planning a large application deployment in Google Cloud that includes connectivity to on-premises locations.

Reading

At the fictional company Meryvanta Enterprise, many development teams need separate Google Cloud projects in which they can independently create and manage VMs and other application resources.

Reading

At the fictional company Myrionex Networks, a VPC network uses regional dynamic routing. Compute Engine VMs and Cloud Interconnect VLAN attachments are in europe-west2.

Reading

At the fictional company Veltraxis Labs, you created a new VPC network for your development team. You want incoming access to resources in this VPC network to be allowed over SSH only.

Reading

At the fictional company Lorynexa Data, one on-premises data center must connect to a Google Cloud VPC network.

Reading

At the fictional company Navorixa Infrastructure, three separate VPC networks for development, testing, and production must connect to two on-premises data centers through Cloud VPN while remaining isolated from one another.

Reading

At the fictional company Brintoryx Networks, your organization has five VPC networks in different Google Cloud projects that require high-throughput private connectivity.

Reading

At the fictional company Norvexis Streaming, you are configuring a new internet-facing application that must support both IPv4 and IPv6, use TCP pass-through on port 443, and run backends in us-west1 and us-east1.

Reading

At the fictional company Elorynth Networks, a multi-region VPC network has an existing HA VPN connection in region 1 to the corporate network.

Reading

At the fictional company Davorixa Financial, you are designing resilient private connectivity between an on-premises data center and Google Cloud.

Reading

Premium Set: 6 [ + Detailed Explanations]

At the fictional company Lumoryn Infrastructure, Dedicated Interconnect is critical to hybrid connectivity.

Reading

At the fictional company Lumerion Services, several services are exposed through a global external Application Load Balancer.

Reading

At the fictional company Kalyvexa Security, you are configuring the intrusion prevention service in Cloud Next Generation Firewall Enterprise.

Reading

At the fictional company Jexoryn Services, you have an HA VPN design with two tunnels configured in an active/passive arrangement.

Reading

At the fictional company Orbelix Security, you use the gcloud CLI to create a project-level custom IAM role by copying permissions from a predefined role.

Reading

At the fictional company Myrionex Cloud, you have a hub-and-spoke VPC architecture.

Reading

At the fictional company Iverexa Networks, you are designing 99.9%-availability hybrid connectivity with redundant VLAN attachments that terminate on one Cloud Router.

Reading

At the fictional company Oryvanta Cloud, you recently became responsible for the organization's Google Cloud network security configuration.

Reading

At the fictional company Galeryn Platforms, you are designing a VPC-native Google Kubernetes Engine (GKE) Standard cluster.

Reading

At the fictional company Joralith Security, you are implementing network controls in a newly created VPC network.

Reading

At the fictional company Teralune Services, you need to create a Google Kubernetes Engine (GKE) cluster in an existing VPC network that is reachable from your on-premises environment through private hybrid connectivity.

Reading

At the fictional company Bravelyra Systems, resources in two different VPC networks, each in a different Google Cloud project, require private connectivity.

Reading

At the fictional company Neryvexa Containers, multiple Google Kubernetes Engine (GKE) clusters are deployed in separate VPC networks, one cluster per VPC.

Reading

At the fictional company Fervanta Networks, an on-premises network contains subnet-a and connects through a VPN gateway to a Google Cloud VPC network.

Reading

At the fictional company Havorixa Networks, two geographically separated on-premises data centers, datacenter-east and datacenter-west, must exchange large volumes of private traffic through Google's backbone.

Reading

At the fictional company Neralith Security, your company deployed Cloud Next Generation Firewall Enterprise.

Reading

At the fictional company Draxivon Data, one Google Cloud project contains multiple VPC networks as well as sensitive Cloud Storage buckets and BigQuery datasets.

Reading

At the fictional company Iverexa Finance, you are designing a Google Kubernetes Engine (GKE) cluster for a highly sensitive financial application in a Shared VPC network.

Reading

At the fictional company Bravionix Group, two departments use separate Google Cloud projects named code-dev and data-dev within the same organization.

Reading

At the fictional company Meryvanta Networks, an on-premises data center is connected to a Google Cloud VPC network through Cloud Interconnect.

Reading

At the fictional company Lumivanta Analytics, Compute Engine VMs without external IP addresses must use Private Google Access to reach Cloud Storage.

Reading

At the fictional company Oryvexa Infrastructure, a critical application depends on Dedicated Interconnect between an on-premises data center and a Google Cloud VPC network.

Reading

At the fictional company Galyrix Industries, a hub VPC network connects to the on-premises network through HA VPN and Cloud Router.

Reading

At the fictional company Jorvexa Enterprise, dev-vpc and prod-vpc are separate VPC networks in different projects.

Reading

At the fictional company Myravanta Web, you need to centralize Identity and Access Management permissions and email distribution for the WebServices team as efficiently as possible.

Reading

At the fictional company Ilyranta Security, you maintain a large set of VPC firewall rules across many projects.

Reading

At the fictional company Mervanta Media, your organization is migrating workloads from AWS to Google Cloud.

Reading

At the fictional company Ivoranta Digital, you are deploying containerized microservices on Cloud Run for customers distributed around the world.

Reading

At the fictional company Oryvanta Networks, Network Connectivity Center connects many VPC spokes.

Reading

At the fictional company Havorinta Networks, you are establishing a secure and resilient connection between an on-premises data center and a Google Cloud VPC network.

Reading

At the fictional company Keralynx Cloud, an enterprise is migrating applications to Google Cloud.

Reading

At the fictional company Galenoryx Compute, Compute Engine VMs are directly reachable from the public internet.

Reading

At the fictional company Navorixa Games, you are designing a global application.

Reading

At the fictional company Galeryn Commerce, you are designing a critical multi-tier application that must survive the loss of a Google Cloud region.

Reading

At the fictional company Kestrion Data, you want to use Partner Interconnect to connect your on-premises network to a Google Cloud VPC network, and you have already selected an Interconnect service provider.

Reading

At the fictional company Keralixa Networks, one Network Connectivity Center VPC spoke contains subnet-corp-prod at 10.10.1.0/24 and subnet-corp-test at 192.168.1.0/24.

Reading

At the fictional company Lumorixa Data, a Network Connectivity Center hub connects landing-zone-vpc and prod-vpc as VPC spokes.

Reading

At the fictional company Havorenta Finance, frontend application VMs and backend database VMs are in different subnets of the same VPC network.

Reading

At the fictional company Nexoryn Applications, you are configuring an instance group as a backend for an Application Load Balancer and need to create a new health check.

Reading

At the fictional company Jorvanta Security, cloud traffic is inspected by a third-party network virtual appliance.

Reading

At the fictional company Elorynth Software, 2,000 Compute Engine VMs without external IP addresses run in private subnets in us-east1.

Reading

At the fictional company Aurelix Digital, you enabled an external Application Load Balancer for your application.

Reading

At the fictional company Auralith Systems, you are designing networking for a hybrid environment in which applications in Google Cloud and services in an on-premises network must resolve each other's private DNS records.

Reading

At the fictional company Fervonix Group, you are designing a landing-zone architecture with these requirements.

Reading

At the fictional company Zenthara Technologies, a Compute Engine VM in your VPC network has only a private IPv4 address.

Reading

At the fictional company Merovexa Networks, two VPC networks are connected through a dual-NIC Compute Engine VM that acts as a bump-in-the-wire firewall.

Reading

At the fictional company Kaldrexa Infrastructure, two network virtual appliance VMs in us-central1 provide routed connectivity to an on-premises network whose destination range is 10.0.0.0/8.

Reading

At the fictional company Solvanta Networks, you want to create an IPsec tunnel between your on-premises network and a VPC network by using Cloud VPN.

Reading

At the fictional company Pyravex Industries, you are in the early stages of planning a migration to Google Cloud and want to test a hybrid-cloud design before production.

Reading

At the fictional company Helionexa Platforms, one VPC network already has private hybrid connectivity to an on-premises environment.

Reading

Announcements Reviews Live Classes Course Info

Previous Next

GCP Google Cloud Professional Cloud Network Engineer Practice Questions At Mirelune Software, you are extending a working automation workflow that authenticates as a service account.

GCP Google Cloud Professional Cloud Network Engineer Practice Questions

Reset Course Progress?

Finish Course Early?

Printing Disabled