Google CloudProfessional levelPage 6 of 8

Google Professional Cloud Network Engineer exam dumps: questions 501 to 600 of 789

Page 6 of the free Google Professional Cloud Network Engineer question bank for the Professional Cloud Network Engineer exam. Questions 501 to 600 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated December 2024

Free Google Professional Cloud Network Engineer practice questions

Questions 501 to 505 of 789

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

Google Professional Cloud Network Engineer Question 501

Select 3Google Cloud Platform

You are configuring Cloud CDN to optimize the performance and cost of delivering content from your application hosted on Google Cloud. During the setup process, you need to ensure that Cloud CDN properly caches and serves content. Which of the following configurations are required to enable and manage Cloud CDN effectively?

  1. A

    Ensure that the backend service or bucket is attached to an external HTTP(S) load balancer.

  2. B

    Enable Cloud CDN for the backend service or backend bucket associated with the load balancer.

  3. C

    Set the cache mode to 'Cache All Requests' to cache every request made to your application, regardless of headers.

  4. D

    Review and configure cache key settings to avoid caching sensitive or user-specific data.

  5. E

    Manually create CDN cache invalidation rules for all new content updates to ensure changes are reflected immediately.

Show answer and explanation

Correct answers: A, B, D

Explanation

To effectively configure Cloud CDN, you must attach the backend service or bucket to an external HTTP(S) load balancer and enable Cloud CDN for that backend. Additionally, careful cache key configuration ensures secure and efficient caching. Over-reliance on manual cache invalidation or indiscriminate caching can lead to inefficiencies or security issues.

  • A. Correct.

    Correct: Cloud CDN requires an external HTTP(S) load balancer to serve content. The backend service or bucket must be attached to the load balancer for Cloud CDN to function.

  • B. Correct.

    Correct: Cloud CDN must be explicitly enabled for the backend service or bucket attached to the load balancer.

  • C. Incorrect.

    Incorrect: Setting 'Cache All Requests' indiscriminately may lead to caching sensitive or user-specific data, which can cause security issues or unintended behavior.

  • D. Correct.

    Correct: Properly configuring cache key settings ensures that Cloud CDN caches content appropriately and avoids storing sensitive or user-specific information.

  • E. Incorrect.

    Incorrect: While cache invalidation can be used to update content, it does not need to be manually configured every time. Cache invalidation can be automated via API calls or other methods.

Google Professional Cloud Network Engineer Question 502

Select 3Google Cloud Platform

Your company hosts a web application on Google Cloud, and you want to improve the global delivery performance of static assets (like images and JavaScript files) by using Cloud CDN. The application also has dynamic content that must not be cached. Which of the following steps should you take to properly configure Cloud CDN to achieve this goal?

  1. A

    Enable Cloud CDN on the backend service or backend bucket that serves the web application.

  2. B

    Set a Cache-Control header with 'no-cache' or 'private' for dynamic content responses.

  3. C

    Use the 'Cache Key Policy' to include query strings and headers relevant to dynamic content.

  4. D

    Configure a Cloud CDN origin to serve all traffic, both static and dynamic, without exception.

  5. E

    Set URL-based routing rules to route static content to the backend bucket and dynamic content to the backend service.

Show answer and explanation

Correct answers: A, B, E

Explanation

To properly configure Cloud CDN for this scenario, you must enable it on the appropriate backend and ensure that dynamic content is excluded from caching using Cache-Control headers. Additionally, URL-based routing rules can help route static content to a backend bucket optimized for caching while routing dynamic content to a backend service. This ensures optimal performance and adherence to the application's requirements.

  • A. Correct.

    Correct. Enabling Cloud CDN on the backend service or bucket is a necessary step to activate the caching functionality.

  • B. Correct.

    Correct. Setting appropriate Cache-Control headers for dynamic content ensures it is not cached by Cloud CDN.

  • C. Incorrect.

    Incorrect. While the Cache Key Policy is useful for controlling cache behavior, it doesn't directly address the requirement to avoid caching dynamic content.

  • D. Incorrect.

    Incorrect. Configuring Cloud CDN to serve all traffic without exception would lead to caching of dynamic content, which violates the requirements.

  • E. Correct.

    Correct. URL-based routing rules can help separate static and dynamic content, ensuring that only static content is cached.

Google Professional Cloud Network Engineer Question 503

Select 3Google Cloud Platform

Your company hosts a web application on Google Cloud using a global HTTPS load balancer. You have been tasked with configuring Cloud CDN to improve the performance and scalability of the application. Which of the following steps must be performed to successfully enable Cloud CDN for the application?

  1. A

    Enable Cloud CDN on the backend service connected to the HTTPS load balancer.

  2. B

    Ensure the backend service is configured with at least one instance group or backend bucket.

  3. C

    Configure caching policies directly on the Cloud CDN service.

  4. D

    Set up a custom domain name for the application before enabling Cloud CDN.

  5. E

    Verify that the HTTPS load balancer has a valid SSL/TLS certificate in place.

Show answer and explanation

Correct answers: A, B, E

Explanation

To configure Cloud CDN, it must be enabled on the backend service of the HTTPS load balancer. The backend service must already have a defined backend (instance group or backend bucket), and a valid SSL/TLS certificate is required for HTTPS traffic. While caching policies can be customized, they are defined via the backend service or URL maps, not directly on Cloud CDN. A custom domain is optional and not required to enable Cloud CDN.

  • A. Correct.

    Correct. Cloud CDN must be enabled on the backend service associated with the HTTPS load balancer to cache and serve content.

  • B. Correct.

    Correct. The backend service must have at least one instance group or backend bucket to serve content, as Cloud CDN works in conjunction with the backend service.

  • C. Incorrect.

    Incorrect. Caching policies are configured via the backend service or URL maps, not directly on the Cloud CDN service.

  • D. Incorrect.

    Incorrect. While a custom domain may be desirable for your application, it is not a mandatory step to enable Cloud CDN.

  • E. Correct.

    Correct. A valid SSL/TLS certificate is required for HTTPS load balancers, which is necessary for Cloud CDN to function correctly.

Google Professional Cloud Network Engineer Question 504

Select 2Google Cloud Platform

You are a network engineer managing a global e-commerce website hosted on Google Cloud. To improve performance and reduce latency for users worldwide, you decide to enable Cloud CDN for your HTTP(S) load balancer. Which of the following configurations and considerations are necessary to ensure Cloud CDN functions correctly?

  1. A

    Ensure that the backend instances send cacheable responses (e.g., responses with appropriate Cache-Control headers).

  2. B

    Verify that the load balancer is configured with an external, global IP address.

  3. C

    Enable the 'Cache All Responses' option in Cloud CDN settings to cache every response, regardless of caching headers.

  4. D

    Confirm that the backend service or backend bucket is configured to use a health check.

  5. E

    Check that the origin server supports HTTP/2 or QUIC protocols to maximize CDN performance.

Show answer and explanation

Correct answers: A, B

Explanation

To configure Cloud CDN successfully, the backend must send cacheable responses, and the HTTP(S) load balancer must be configured with a global, external IP address. These are critical requirements for Cloud CDN to serve cached content to users worldwide. Other considerations, such as health checks and HTTP/2, may add value but are not directly required for enabling Cloud CDN.

  • A. Correct.

    Correct. For Cloud CDN to cache content, responses from the backend must be cacheable. This includes setting appropriate Cache-Control headers or other caching metadata.

  • B. Correct.

    Correct. Cloud CDN requires that the HTTP(S) load balancer is configured with a global, external IP address to serve cached content to users worldwide.

  • C. Incorrect.

    Incorrect. Cloud CDN does not cache all responses by default, and enabling caching for all responses without proper Cache-Control headers could lead to incorrect behavior, such as caching private or dynamic content.

  • D. Incorrect.

    Incorrect. While health checks are required for backend services, they are not specific to enabling Cloud CDN functionality. Health checks are generally used to ensure that backend instances are operational.

  • E. Incorrect.

    Incorrect. While HTTP/2 or QUIC can improve performance, they are not mandatory for enabling or configuring Cloud CDN. Cloud CDN can still function using HTTP/1.1.

Google Professional Cloud Network Engineer Question 505

Select 4Google Cloud Platform

You are tasked with setting up Cloud CDN to improve the performance and availability of your application. The application is deployed on multiple supported origins: a Cloud Storage bucket, a Cloud Run service, and a managed instance group. Which steps should you take to successfully enable Cloud CDN for these origins?

  1. A

    Add an external HTTP(S) load balancer and configure the origins as backend services.

  2. B

    Enable Cloud CDN on the backend services connected to the external HTTP(S) load balancer.

  3. C

    Ensure the origins support public access and are configured with appropriate caching policies.

  4. D

    Directly enable Cloud CDN on the Cloud Storage bucket, Cloud Run service, and managed instance group without using a load balancer.

  5. E

    Configure a private IP address for the backend services to ensure caching is enabled for private traffic.

  6. F

    Set up appropriate cache invalidation rules to manage content updates in Cloud CDN.

Show answer and explanation

Correct answers: A, B, C, F

Explanation

To enable Cloud CDN for supported origins (Cloud Storage buckets, Cloud Run services, and managed instance groups), you must first configure an external HTTP(S) load balancer to route traffic to these origins. Cloud CDN is then enabled on the backend services associated with the load balancer. The origins must support public access with appropriate caching policies, and cache invalidation rules should be defined to manage content updates effectively. Directly enabling Cloud CDN on origins without a load balancer or setting private IPs is not supported.

  • A. Correct.

    Correct: Cloud CDN requires an external HTTP(S) load balancer to route traffic to the supported origins. This is a necessary step for enabling Cloud CDN.

  • B. Correct.

    Correct: Enabling Cloud CDN on the backend services connected to the load balancer ensures caching is activated for those origins.

  • C. Correct.

    Correct: Cloud CDN works with public-facing origins, so ensuring public access and configuring caching policies is required for proper functionality.

  • D. Incorrect.

    Incorrect: Cloud CDN cannot be enabled directly on Cloud Storage buckets, Cloud Run services, or managed instance groups. A load balancer is required to manage traffic and caching.

  • E. Incorrect.

    Incorrect: Cloud CDN is designed for public traffic and does not cache private traffic. Configuring a private IP is not relevant to enabling Cloud CDN.

  • F. Correct.

    Correct: Cache invalidation rules are important to manage updates to content in Cloud CDN and ensure users receive the most recent data.

Timed practice exam

Take a Google Professional Cloud Network Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

Google Professional Cloud Network Engineer practice questions 501 to 600 of 789

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 8 pages of up to 100 questions.

  1. 501.You are configuring Cloud CDN to optimize the performance and cost of delivering content from your...
  2. 502.Your company hosts a web application on Google Cloud, and you want to improve the global delivery performance...
  3. 503.Your company hosts a web application on Google Cloud using a global HTTPS load balancer. You have been tasked...
  4. 504.You are a network engineer managing a global e-commerce website hosted on Google Cloud. To improve...
  5. 505.You are tasked with setting up Cloud CDN to improve the performance and availability of your application. The...
  6. 506.You are tasked with setting up Cloud CDN to cache content for a high-traffic web application hosted on Google...
  7. 507.You are tasked with setting up Cloud CDN for your organization's web application to improve performance and...
  8. 508.Your organization is hosting a static website on a Cloud Storage bucket and wants to leverage Cloud CDN to...
  9. 509.You are a network engineer tasked with setting up Cloud CDN to optimize the delivery of static content for...
  10. 510.Your organization uses a third-party object storage provider to host static assets, such as images and...
  11. 511.You are tasked with setting up Cloud CDN to serve cached content for a web application using a third-party...
  12. 512.You are tasked with improving the performance and caching of static content hosted on a third-party object...
  13. 513.You are setting up Cloud CDN to cache content from an external backend using an internet NEG (Network...
  14. 514.You are setting up Cloud CDN to cache content served from an external backend hosted on third-party object...
  15. 515.Your organization is using Cloud CDN to serve static content for a global web application. After deploying...
  16. 516.You have set up a Cloud CDN to cache content for your application hosted on Google Cloud. Recently, your team...
  17. 517.Your organization is using Cloud CDN to serve static content to users globally. A recent deployment included...
  18. 518.Your organization hosts a website using Cloud CDN to serve static assets. A critical bug was discovered in...
  19. 519.You are using Cloud CDN to serve cached content for your website. A critical update was made to your...
  20. 520.You are implementing a solution to allow temporary access to private objects stored in a Google Cloud Storage...
  21. 521.You are designing a secure way to allow users to download a file stored in a Google Cloud Storage bucket...
  22. 522.Your company hosts static assets in a Google Cloud Storage bucket, and you need to allow temporary secure...
  23. 523.Your company wants to provide temporary access to a specific object stored in a Google Cloud Storage bucket...
  24. 524.You are tasked with setting up temporary access to a large file stored in a Google Cloud Storage bucket for a...
  25. 525.Your organization uses Google Cloud DNS to manage the DNS records for its website. The website must remain...
  26. 526.Your company needs to configure DNS to support a multi-region application deployment in Google Cloud. The...
  27. 527.Your organization is hosting a web application on Google Cloud, and you need to configure Cloud DNS to...
  28. 528.Your company is migrating its on-premises DNS infrastructure to Google Cloud DNS. As part of the migration,...
  29. 529.Your organization has implemented a web application hosted in multiple regions on Google Cloud. You use a...
  30. 530.Your company is migrating its DNS infrastructure to Google Cloud DNS. The existing DNS setup includes a zone...
  31. 531.Your company has deployed a web application hosted on multiple Compute Engine instances behind a global...
  32. 532.Your company is migrating its application to Google Cloud and requires the creation of a DNS zone to manage...
  33. 533.Your company is migrating a legacy on-premises application to Google Cloud and needs to set up a private DNS...
  34. 534.You manage a multi-region application hosted on Google Cloud using multiple Virtual Private Cloud (VPC)...
  35. 535.Your organization is planning to migrate an external DNS zone to Google Cloud DNS. The external DNS provider...
  36. 536.Your organization is migrating its on-premises DNS solution to Google Cloud DNS. You need to ensure minimal...
  37. 537.You are tasked with migrating an organization's on-premises DNS records to Cloud DNS on Google Cloud. The...
  38. 538.Your company is migrating its on-premises DNS infrastructure to Google Cloud DNS. As part of the migration,...
  39. 539.Your organization is currently using an on-premises DNS solution and plans to migrate to Google Cloud DNS for...
  40. 540.Your organization has recently started using Google Cloud DNS to manage its domains. To enhance security and...
  41. 541.You are managing a Google Cloud project for a financial institution. The institution requires enhanced DNS...
  42. 542.Your organization is using Google Cloud DNS to manage its domain. To improve the security and authenticity of...
  43. 543.Your company is hosting a production domain on Google Cloud DNS and requires DNSSEC to be enabled for...
  44. 544.Your organization has configured a public DNS zone in Google Cloud DNS to host the domain example.com. To...
  45. 545.Your organization has deployed multiple GKE clusters in a single Google Cloud project. To ensure consistent...
  46. 546.Your organization has a hybrid cloud setup with on-premises data centers and resources deployed in Google...
  47. 547.You are designing a hybrid cloud architecture where your on-premises environment needs to resolve internal...
  48. 548.Your organization has deployed a hybrid cloud architecture. On-premises workloads need to resolve specific...
  49. 549.Your organization is setting up a hybrid cloud environment. You need to ensure that DNS queries for...
  50. 550.Your organization is migrating workloads to Google Cloud while retaining an on-premises DNS setup for...
  51. 551.Your organization has an on-premises DNS system that resolves internal domain names and a private Google...
  52. 552.Your organization hosts several internal services using private DNS zones on-premises. You want Google Cloud...
  53. 553.Your organization has an on-premises DNS server that manages internal domain names. You are migrating some...
  54. 554.Your company has an on-premises DNS server used to resolve internal hostnames, and you want to enable hybrid...
  55. 555.Your organization has deployed a hybrid environment with services hosted both on Google Cloud and...
  56. 556.Your company is hosting a multi-region application on Google Cloud, which has users accessing it both from...
  57. 557.Your company has deployed an application that is accessible both internally from the corporate network and...
  58. 558.Your company has deployed an application in Google Cloud that needs to resolve DNS queries differently based...
  59. 559.You are designing a hybrid cloud architecture for a global company. The on-premises environment must...
  60. 560.You are tasked with enabling DNS resolution between two separate VPC networks, VPC-A and VPC-B, in Google...
  61. 561.You are managing the network infrastructure for a company with multiple Google Cloud projects. Project A...
  62. 562.You are tasked with setting up DNS peering between two Google Cloud projects, Project-A and Project-B....
  63. 563.You are working for an organization that has two separate Google Cloud projects: Project A and Project B....
  64. 564.You are setting up DNS peering between two Virtual Private Clouds (VPCs) in Google Cloud: VPC-A and VPC-B....
  65. 565.You are setting up a GKE cluster to use Cloud DNS for managing DNS records dynamically. You decide to use the...
  66. 566.You are configuring Cloud DNS for a GKE cluster that uses the external-DNS operator to manage DNS records...
  67. 567.You are managing a GKE cluster for a production application that requires dynamic DNS record updates for...
  68. 568.You are managing a Google Kubernetes Engine (GKE) cluster that hosts multiple applications. You want to...
  69. 569.You are managing a GKE cluster in Google Cloud and need to set up automatic DNS record management for...
  70. 570.Your company hosts a web application in Google Cloud that requires internet access to fetch updates from a...
  71. 571.Your organization uses a Google Cloud Virtual Private Cloud (VPC) and requires internet egress traffic to be...
  72. 572.You are working for a company that wants to secure internet egress traffic for its applications hosted on...
  73. 573.Your organization has deployed multiple workloads in Google Cloud, and you need to configure secure and...
  74. 574.Your organization uses Google Cloud to host its applications and wants to configure and secure internet...
  75. 575.You are designing a Google Cloud networking solution to allow a private Compute Engine instance to access...
  76. 576.Your organization is using a Google Cloud project with a Cloud NAT gateway to allow Compute Engine instances...
  77. 577.Your organization has deployed a Google Cloud Virtual Private Cloud (VPC) with several private instances in a...
  78. 578.You are configuring Cloud NAT for a private subnet in your VPC. The subnet requires internet access for...
  79. 579.Your organization is using Google Cloud to host a web application. The application is deployed in a private...
  80. 580.You are designing a Google Cloud environment to host a containerized application in Google Kubernetes Engine...
  81. 581.You are designing a Google Cloud environment for a web application that will use Google Kubernetes Engine...
  82. 582.Your organization is hosting a web application on Google Cloud using a backend service behind an HTTP(S) load...
  83. 583.Your company is hosting a web application on a Google Kubernetes Engine (GKE) cluster. The application needs...
  84. 584.You are tasked with configuring a Google Cloud Load Balancer for a web application. The application requires...
  85. 585.Your organization has a web application hosted on Google Cloud and uses an HTTP(S) Load Balancer to...
  86. 586.You are configuring a Google Cloud Load Balancer to serve a global web application. Users have reported...
  87. 587.Your team has deployed a custom API on Google Cloud that is accessed via an HTTP(S) Load Balancer. Some...
  88. 588.Your team has deployed an application on Google Kubernetes Engine (GKE) with an HTTP(S) Load Balancer to...
  89. 589.You are managing a Google Cloud project that uses a public-facing load balancer to handle incoming HTTP...
  90. 590.You are a Cloud Network Engineer at an organization that heavily manages its network resources with Google...
  91. 591.You are a Professional Cloud Network Engineer tasked with configuring Cloud NAT in your organization....
  92. 592.Your organization wants to enforce a policy that ensures Cloud NAT is used only in specific projects to meet...
  93. 593.Your organization requires all Cloud NAT configurations to use specific IP ranges for external NAT IP...
  94. 594.Your organization requires all Cloud NAT configurations across projects to use manual IP address allocation...
  95. 595.You are tasked with configuring Private NAT for a Google Cloud project to enable private instances in a VPC...
  96. 596.You are tasked with setting up a Private NAT configuration for workloads in a private subnet of your VPC. The...
  97. 597.You are tasked with configuring Private NAT on Google Cloud to allow Compute Engine instances in a private...
  98. 598.Your organization has deployed a private GKE cluster in Google Cloud. The cluster nodes do not have external...
  99. 599.You are managing a Google Cloud project that hosts a private application on Compute Engine virtual machines...
  100. 600.Your company wants to enforce secure web traffic routing for all users accessing external websites. You are...