Google CloudProfessional levelPage 7 of 8

Google Professional Cloud Network Engineer exam dumps: questions 601 to 700 of 789

Page 7 of the free Google Professional Cloud Network Engineer question bank for the Professional Cloud Network Engineer exam. Questions 601 to 700 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated December 2024

Start timed practice exam Questions 601 to 700

Free Google Professional Cloud Network Engineer practice questions

Questions 601 to 605 of 789

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

Google Professional Cloud Network Engineer Question 601

Select 3Google Cloud Platform

Your company wants to ensure secure web traffic for all employees by routing HTTP and HTTPS traffic through a secure web proxy. You are tasked with configuring this setup using Google Cloud. Which steps must you take to configure the secure web proxy correctly?

  1. A

    Create a Google Cloud NAT gateway and configure it to route traffic through the proxy server.

  2. B

    Set up firewall rules to allow egress web traffic only to the secure web proxy IP address.

  3. C

    Configure a Cloud Router to manage dynamic routes for the secure web proxy.

  4. D

    Update the VPC route table to forward HTTP and HTTPS traffic to the secure web proxy.

  5. E

    Deploy a managed instance group with a proxy server and configure the proxy settings on client devices.

Show answer and explanation

Correct answers: B, D, E

Explanation

To configure a secure web proxy in Google Cloud, you need to ensure that all egress HTTP and HTTPS traffic is routed through the proxy. This involves restricting web traffic with firewall rules, updating the VPC route table to direct traffic to the proxy, and deploying a proxy server (e.g., using a managed instance group). Configuring Cloud NAT or Cloud Router is not specifically required in this scenario.

  • A. Incorrect.

    Incorrect. While Cloud NAT can be used to manage outbound traffic, it is not specifically required for configuring a secure web proxy.

  • B. Correct.

    Correct. Firewall rules must be configured to restrict egress web traffic to only the secure web proxy IP address, ensuring traffic is routed securely.

  • C. Incorrect.

    Incorrect. A Cloud Router is primarily used for managing dynamic routing with hybrid connectivity or multi-cloud setups. It is not required for a secure web proxy configuration.

  • D. Correct.

    Correct. Updating the VPC route table ensures that traffic destined for HTTP and HTTPS is directed to the secure web proxy.

  • E. Correct.

    Correct. Deploying a managed instance group with a proxy server and configuring client devices ensures that traffic is routed through the secure web proxy.

Google Professional Cloud Network Engineer Question 602

Select 3Google Cloud Platform

Your organization requires all outbound web traffic from workloads in Google Cloud to pass through a secure web proxy for inspection and filtering. You are tasked with configuring this setup. Which steps should you take to implement this requirement securely and effectively?

  1. A

    Set up a custom route in the VPC to forward traffic to the secure web proxy's IP address.

  2. B

    Configure a NAT gateway to route all traffic through the secure web proxy automatically.

  3. C

    Deploy a Google Cloud firewall rule to block direct outbound web traffic from workloads.

  4. D

    Use a Proxy PAC file or environment variables to configure workloads to direct web traffic to the secure web proxy.

  5. E

    Enable Identity-Aware Proxy (IAP) to ensure outbound traffic is secure and inspected by the proxy.

Show answer and explanation

Correct answers: A, C, D

Explanation

To configure a secure web proxy in Google Cloud, you must ensure that all outbound web traffic is directed to the proxy for inspection. This involves configuring a custom route in the VPC, deploying a firewall rule to block direct traffic, and setting up workloads to use the proxy via a Proxy PAC file or environment variables. These steps collectively ensure the secure routing of traffic through the web proxy.

  • A. Correct.

    This is correct. A custom route in the VPC is necessary to ensure that traffic is forwarded to the secure web proxy's IP address for inspection.

  • B. Incorrect.

    This is incorrect. A NAT gateway is used for internet access but does not inherently route traffic through a secure web proxy. Additional configurations are required.

  • C. Correct.

    This is correct. A firewall rule is needed to block direct outbound web traffic, ensuring that all traffic passes through the secure web proxy.

  • D. Correct.

    This is correct. Configuring workloads to use a Proxy PAC file or environment variables ensures that they direct their web traffic to the secure web proxy.

  • E. Incorrect.

    This is incorrect. Identity-Aware Proxy (IAP) is used to secure access to applications, not for routing outbound web traffic through a secure web proxy.

Google Professional Cloud Network Engineer Question 603

Select 2Google Cloud Platform

Your organization wants to enforce secure web traffic for all users by routing their HTTP and HTTPS traffic through a Secure Web Proxy deployed on Google Cloud. Which steps must you take to configure this setup correctly?

  1. A

    Configure a Google Cloud Load Balancer to forward traffic to the Secure Web Proxy instance.

  2. B

    Enable VPC firewall rules to allow egress traffic from user devices to the Secure Web Proxy.

  3. C

    Set up a Cloud NAT instance to route requests from the Secure Web Proxy to the internet.

  4. D

    Deploy the Secure Web Proxy as a managed service using Cloud Armor.

  5. E

    Configure user devices or on-premises systems to use the Secure Web Proxy's IP or DNS address.

Show answer and explanation

Correct answers: B, E

Explanation

To configure a Secure Web Proxy, you must ensure that user traffic is routed to the proxy instance and allowed through the VPC network. This involves enabling the necessary VPC firewall rules and updating user devices or on-premises systems to use the proxy’s IP or DNS address. Other options, such as Load Balancers and Cloud NAT, are not relevant in this scenario.

  • A. Incorrect.

    Configuring a Load Balancer is not needed in this setup because the Secure Web Proxy itself handles the routing and does not require load balancing for basic functionality.

  • B. Correct.

    Enabling VPC firewall rules is essential to ensure that traffic from user devices is allowed to reach the Secure Web Proxy instance.

  • C. Incorrect.

    Cloud NAT is not required because the Secure Web Proxy is designed to handle outbound internet traffic directly without the need for NAT.

  • D. Incorrect.

    Secure Web Proxy is not a managed service under Cloud Armor. Cloud Armor is used for web application security, not for proxying traffic.

  • E. Correct.

    User devices or on-premises systems must be configured to route traffic through the Secure Web Proxy by specifying its IP address or DNS name. Without this configuration, the traffic will not be redirected to the proxy.

Google Professional Cloud Network Engineer Question 604

Select 2Google Cloud Platform

Your organization has implemented a secure web proxy solution on Google Cloud for outbound internet traffic. You need to configure your VPC network so that traffic from instances in a specific subnet is routed through the secure web proxy. Which steps should you take to achieve this configuration?

  1. A

    Create a custom static route with the secure web proxy as the next hop and apply it to the desired subnet.

  2. B

    Enable the Private Google Access setting on the subnet where the instances reside.

  3. C

    Configure a firewall rule to allow egress traffic from the subnet to the secure web proxy.

  4. D

    Set up a URL map in a load balancer to direct traffic to the secure web proxy.

  5. E

    Use a Cloud NAT gateway to route traffic from the subnet to the secure web proxy.

Show answer and explanation

Correct answers: A, C

Explanation

To route traffic through a secure web proxy, you need to define a custom static route with the secure web proxy as the next hop and apply it to the desired subnet. Additionally, a firewall rule must be created to allow egress traffic from the subnet to the secure web proxy. Enabling Private Google Access, setting up a URL map, or using a Cloud NAT gateway are not relevant to this use case.

  • A. Correct.

    Correct: Configuring a custom static route with the secure web proxy as the next hop ensures that traffic from the subnet is directed through the proxy.

  • B. Incorrect.

    Incorrect: Private Google Access is used for accessing Google APIs and services from private IPs in your VPC, but it is not related to routing traffic through a secure web proxy.

  • C. Correct.

    Correct: A firewall rule is necessary to allow traffic from the subnet to reach the secure web proxy.

  • D. Incorrect.

    Incorrect: URL maps in load balancers are used for HTTP(S) traffic redirection and are not involved in configuring secure web proxies.

  • E. Incorrect.

    Incorrect: Cloud NAT is used for providing external IPs for instances without external IPs, but it does not route traffic through a secure web proxy.

Google Professional Cloud Network Engineer Question 605

Select 2Google Cloud Platform

You are designing a network architecture for a financial application hosted on Google Cloud. The application requires real-time packet inspection to identify and block malicious traffic between internal services. Which of the following configurations can enable network packet inspection in this scenario?

  1. A

    Deploy a Cloud IDS and configure it to monitor traffic between subnets.

  2. B

    Enable VPC Flow Logs and use them for real-time packet inspection.

  3. C

    Implement firewall rules to allow only specific IP ranges.

  4. D

    Use a third-party virtual appliance to perform deep packet inspection.

  5. E

    Configure Google Cloud Armor policies to inspect and block malicious traffic.

Show answer and explanation

Correct answers: A, D

Explanation

To enable network packet inspection, Cloud IDS or third-party virtual appliances are effective options. Cloud IDS is a managed service provided by Google Cloud, making it easier to integrate and deploy. Alternatively, a third-party virtual appliance can be used for custom deep packet inspection requirements. Other options like VPC Flow Logs, firewall rules, and Google Cloud Armor do not provide the functionality required for real-time packet inspection.

  • A. Correct.

    Cloud IDS provides network packet inspection capabilities by analyzing traffic for malicious patterns, making it suitable for this use case.

  • B. Incorrect.

    VPC Flow Logs provide metadata about network traffic but do not perform real-time packet inspection. They are useful for logging and analysis but not for detecting malicious traffic in real-time.

  • C. Incorrect.

    Firewall rules control access based on IP ranges, ports, and protocols, but they do not perform deep packet inspection.

  • D. Correct.

    Third-party virtual appliances can be deployed on Google Cloud to perform deep packet inspection, as they are specifically designed for this purpose.

  • E. Incorrect.

    Google Cloud Armor is designed for protecting web applications from external threats (e.g., DDoS, SQL injection) and does not provide internal packet inspection for traffic between services.

Timed practice exam

Take a Google Professional Cloud Network Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

Google Professional Cloud Network Engineer practice questions 601 to 700 of 789

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 8 pages of up to 100 questions.

  1. 601.Your company wants to ensure secure web traffic for all employees by routing HTTP and HTTPS traffic through a...
  2. 602.Your organization requires all outbound web traffic from workloads in Google Cloud to pass through a secure...
  3. 603.Your organization wants to enforce secure web traffic for all users by routing their HTTP and HTTPS traffic...
  4. 604.Your organization has implemented a secure web proxy solution on Google Cloud for outbound internet traffic....
  5. 605.You are designing a network architecture for a financial application hosted on Google Cloud. The application...
  6. 606.You are designing a network architecture in Google Cloud for a financial services application that processes...
  7. 607.Your organization requires that all internal traffic flowing between two VPC networks in different regions is...
  8. 608.You are tasked with configuring network packet inspection on a Google Cloud environment for an e-commerce...
  9. 609.You are tasked with implementing network packet inspection for your organization's Google Cloud environment...
  10. 610.You are tasked with routing and inspecting inter-VPC traffic in your Google Cloud environment using a...
  11. 611.You are tasked with setting up a next-generation firewall (NGFW) appliance in Google Cloud to inspect and...
  12. 612.You are tasked with designing a Google Cloud solution to route and inspect inter-VPC traffic between two...
  13. 613.Your organization uses multiple VPCs to segment workloads, and you are tasked with setting up a centralized...
  14. 614.Your organization has deployed multiple VPCs in Google Cloud for different departments. To secure and inspect...
  15. 615.You are designing a highly available routing solution for a multi-NIC VM that serves traffic over different...
  16. 616.You are designing a highly available architecture for a multi-NIC VM acting as a firewall in Google Cloud. To...
  17. 617.You are designing a highly available architecture for a multi-NIC VM that routes private traffic between two...
  18. 618.You are designing a highly available network architecture for a multi-NIC virtual machine (VM) in Google...
  19. 619.You are tasked with configuring a highly available routing solution for a multi-NIC virtual machine (VM) in...
  20. 620.Your organization has recently deployed Cloud NGFW by Palo Alto Networks on Google Cloud to enhance the...
  21. 621.Your organization is deploying a Cloud NGFW (Next Generation Firewall) in Google Cloud to enhance security by...
  22. 622.You are a network engineer managing a Google Cloud environment for a retail company. The company needs to...
  23. 623.You are working as a Cloud Network Engineer for a company that uses Google Cloud. The company has deployed a...
  24. 624.Your organization is deploying Cloud NGFW to secure traffic in Google Cloud. To enable Layer 7 packet...
  25. 625.Your company has a hybrid cloud setup with critical workloads running both on-premises and in Google Cloud....
  26. 626.Your company needs to establish a high-speed, private connection between its on-premises data center and...
  27. 627.You are designing a hybrid cloud solution for your organization. You need to set up a Dedicated Interconnect...
  28. 628.Your organization is planning to set up a high-speed, private connection between their on-premises data...
  29. 629.Your company is planning to use a Dedicated Interconnect to establish a high-speed, low-latency connection...
  30. 630.Your organization requires a high-bandwidth, low-latency connection between your on-premises data center and...
  31. 631.You are a network engineer for a retail company that needs to establish a high-bandwidth, low-latency...
  32. 632.Your organization needs a high-bandwidth, low-latency connection between its on-premises data center and...
  33. 633.Your company needs a high-speed, private connection between its on-premises data center and Google Cloud. You...
  34. 634.Your organization needs to establish a high-throughput, low-latency connection between its on-premises data...
  35. 635.You are tasked with setting up a Partner Interconnect connection between your on-premises network and a...
  36. 636.Your company needs to create a Partner Interconnect connection to establish connectivity between your...
  37. 637.Your company needs to establish a hybrid connection between its on-premises data center and Google Cloud...
  38. 638.Your organization wants to set up a Partner Interconnect to connect its on-premises network to Google Cloud....
  39. 639.Your organization is expanding its on-premises network connectivity to Google Cloud using Partner...
  40. 640.Your organization is deploying a multi-cloud architecture with workloads hosted on both Google Cloud Platform...
  41. 641.Your organization operates workloads on both Google Cloud and another public cloud provider. You are tasked...
  42. 642.Your organization has a multi-cloud architecture with resources hosted in both Google Cloud and another cloud...
  43. 643.Your company has multiple applications hosted in Google Cloud and AWS. To ensure low-latency communication...
  44. 644.Your organization is using a multi-cloud strategy and needs to establish a high-speed, low-latency connection...
  45. 645.You are tasked with enabling MACsec (Media Access Control Security) on a Google Cloud network to ensure Layer...
  46. 646.You are tasked with securing communication on an interconnect between your on-premises data center and Google...
  47. 647.You are tasked with securing Layer 2 communication between two on-premises data centers connected via an...
  48. 648.You are a network engineer responsible for securing communication between two on-premises locations connected...
  49. 649.You are a Professional Cloud Network Engineer tasked with ensuring data confidentiality and integrity between...
  50. 650.You are tasked with configuring a highly available VPN (HA VPN) over Cloud Interconnect for a hybrid...
  51. 651.You are tasked with creating a highly available VPN connection between your on-premises network and Google...
  52. 652.You are tasked with configuring a highly available hybrid connectivity solution between your on-premises...
  53. 653.Your organization needs to establish a highly available VPN connection between its on-premises data center...
  54. 654.You are designing a hybrid connectivity solution for your company that requires high availability for VPN...
  55. 655.You are configuring a site-to-site IPSec VPN between your on-premises data center and a Google Cloud Virtual...
  56. 656.You are configuring a site-to-site IPSec VPN between your on-premises data center and a Google Cloud VPN...
  57. 657.Your organization needs to establish a secure site-to-site connection between its on-premises data center and...
  58. 658.Your organization needs to establish a secure site-to-site VPN connection between its on-premises data center...
  59. 659.You are configuring a site-to-site IPSec VPN between your on-premises data center and a Google Cloud Virtual...
  60. 660.You are tasked with configuring an HA VPN connection between your on-premises data center and your Google...
  61. 661.You are tasked with setting up an HA VPN connection between your on-premises data center and your Google...
  62. 662.You are tasked with setting up a highly available VPN connection between your on-premises data center and...
  63. 663.You are tasked with establishing a high-availability connection between your on-premises data center and...
  64. 664.Your organization needs to configure an HA VPN between your on-premises data center and Google Cloud. During...
  65. 665.You are tasked with setting up a Classic VPN between your Google Cloud Virtual Private Cloud (VPC) and an...
  66. 666.You are configuring a Classic VPN to establish connectivity between your on-premises network and Google...
  67. 667.You are tasked with setting up a Classic VPN connection between your Google Cloud environment and an...
  68. 668.Your company is setting up a Classic VPN to establish secure connectivity between its Google Cloud VPC...
  69. 669.Your organization has a legacy on-premises data center that requires a VPN connection to Google Cloud for...
  70. 670.You are configuring a Cloud Router to establish a BGP session with an on-premises router using a VPN tunnel....
  71. 671.Your organization is setting up a hybrid cloud architecture and needs to establish a BGP (Border Gateway...
  72. 672.You are tasked with setting up a Cloud Router to establish a dynamic VPN connection between your GCP Virtual...
  73. 673.Your organization has a hybrid cloud setup with an on-premises data center connected to Google Cloud via a...
  74. 674.You are configuring a Cloud Router to establish a BGP session with your on-premises router. During the setup,...
  75. 675.You are configuring a hybrid cloud setup between your on-premises network and Google Cloud using Cloud Router...
  76. 676.You are configuring a hybrid network between your on-premises data center and Google Cloud using Cloud Router...
  77. 677.You are configuring BGP between your on-premises network and a Google Cloud Virtual Private Cloud (VPC) using...
  78. 678.Your company has deployed a hybrid cloud architecture using Google Cloud's Dedicated Interconnect to connect...
  79. 679.You are configuring a hybrid network between your on-premises data center and Google Cloud using Cloud VPN...
  80. 680.Your organization has set up a hybrid cloud architecture with Google Cloud and an on-premises data center....
  81. 681.You are configuring Bidirectional Forwarding Detection (BFD) on a Google Cloud deployment to enable rapid...
  82. 682.You are configuring a hybrid network between your on-premises data center and Google Cloud using Cloud Router...
  83. 683.You are configuring a hybrid network between your on-premises infrastructure and Google Cloud. The setup uses...
  84. 684.You are configuring a VPN connection between your on-premises data center and Google Cloud using Cloud Router...
  85. 685.You are managing a hybrid cloud environment with a VPN tunnel connecting your on-premises network to your...
  86. 686.You are managing a multi-region Google Cloud deployment with a hybrid networking setup. Your organization...
  87. 687.You are designing a hybrid network setup where your on-premises network connects to Google Cloud through a...
  88. 688.Your organization has a hybrid cloud setup with an on-premises data center connected to your Google Cloud...
  89. 689.Your organization has a hybrid cloud setup with an on-premises data center connected to Google Cloud through...
  90. 690.You are tasked with configuring a global networking solution for a multinational company using Google Cloud's...
  91. 691.Your organization is using Google Cloud's Network Connectivity Center (NCC) to manage and monitor a global...
  92. 692.You are a Cloud Network Engineer tasked with setting up a global connectivity solution for a company with...
  93. 693.Your organization is in the process of deploying Google Cloud's Network Connectivity Center (NCC) to create a...
  94. 694.You are tasked with setting up a global hybrid network using Network Connectivity Center (NCC). Your...
  95. 695.You are designing a hybrid network architecture for a company that needs to securely connect their...
  96. 696.Your organization needs to create a hybrid connectivity solution between its on-premises data center and...
  97. 697.You are designing a hybrid network for your organization, which requires secure and low-latency connectivity...
  98. 698.You are designing a hybrid network for a company that requires low-latency, high-bandwidth communication...
  99. 699.Your company has a hybrid environment that connects its on-premises data center to Google Cloud. You have...
  100. 700.Your company needs to establish a secure site-to-site data transfer between its on-premises environment and...

More Google Cloud exam dumps

All Google Cloud exams
374 questions

Google Associate Cloud Engineer exam dumps

Associate Cloud Engineer

258 questions

Google Professional Cloud Database Engineer exam dumps

Professional Cloud Database Engineer

266 questions

Google Professional Cloud DevOps Engineer exam dumps

Professional Cloud DevOps Engineer

480 questions

Google Professional Cloud Developer exam dumps

Professional Cloud Developer

500 questions

Google Professional Cloud Security Engineer exam dumps

Professional Cloud Security Engineer

278 questions

Google Professional Data Engineer exam dumps

Professional Data Engineer

521 questions

Google Professional Machine Learning Engineer exam dumps

Professional Machine Learning Engineer