Professional-Cloud-Network-Engineer 무료 덤프문제 온라인 액세스

Question:
Your organization has approximately 100 teams that need to manage their own environments. A central team must manage the network. You need to design a landing zone that provides separate projects for each team and ensure the solution can scale. What should you do?

• A.Configure a Shared VPC and create a VPC network in the host project.
• B.Configure VPC Network Peering and peer one of the VPCs to the service project.
• C.Configure a Shared VPC, and create a VPC network in the service project.
• D.Configure Policy-based Routing for each team.

You are configuring an HA VPN connection between your Virtual Private Cloud (VPC) and on-premises network. The VPN gateway is named VPN_GATEWAY_1. You need to restrict VPN tunnels created in the project to only connect to your on-premises VPN public IP address: 203.0.113.1/32. What should you do?

• A.Configure a firewall rule accepting 203.0.113.1/32, and set a target tag equal to VPN_GATEWAY_1.
• B.Configure the Resource Manager constraint constraints/compute.restrictVpnPeerIPs to use an allowList consisting of only the 203.0.113.1/32 address.
• C.Configure a Google Cloud Armor security policy, and create a policy rule to allow 203.0.113.1/32.
• D.Configure an access control list on the peer VPN gateway to deny all traffic except 203.0.113.1/32, and attach it to the primary external interface.

You have deployed a new internal application that provides HTTP and TFTP services to on-premises hosts.
You want to be able to distribute traffic across multiple Compute Engine instances, but need to ensure that clients are sticky to a particular instance across both services.
Which session affinity should you choose?

• A.Client IP and protocol
• B.None
• C.Client IP
• D.Client IP, port and protocol

You recently deployed two network virtual appliances in us-central1. Your network appliances provide connectivity to your on-premises network, 10.0.0.0/8. You need to configure the routing for your Virtual Private Cloud (VPC). Your design must meet the following requirements:
All access to your on-premises network must go through the network virtual appliances.
Allow on-premises access in the event of a single network virtual appliance failure.
Both network virtual appliances must be used simultaneously.
Which method should you use to accomplish this?

• A.Configure a network load balancer for the two network virtual appliances. Configure a route for 10.0.0.0
  /8 with the network load balancer as the next hop.
• B.Configure two routes for 10.0.0.0/8 with different priorities, each pointing to separate network virtual appliances.
• C.Configure an internal TCP/UDP load balancer with the two network virtual appliances as backends.Configure a route for 10.0.0.0/8 with the internal load balancer as the next hop.
• D.Configure an internal HTTP(S) load balancer with the two network virtual appliances as backends.
  Configure a route for 10.0.0.0/8 with the internal HTTP(S) load balancer as the next hop.

You have enabled HTTP(S) load balancing for your application, and your application developers have reported that HTTP(S) requests are not being distributed correctly to your Compute Engine Virtual Machine instances. You want to find data about how the request are being distributed.
Which two methods can accomplish this? (Choose two.)

• A.In Stackdriver Monitoring, select Resources > Metrics Explorer and search for https
  /request_bytes_count metric.
• B.In Stackdriver Error Reporting, look for any unacknowledged errors for the Cloud Load Balancers service.
• C.On the Load Balancer details page of the GCP Console, click on the Monitoring tab, select your backend service, and look at the graphs.
• D.In Stackdriver Monitoring, select Resources > Google Cloud Load Balancers and review the Key Metrics graphs in the dashboard.
• E.In Stackdriver Monitoring, create a new dashboard and track the https/backend_request_count metric for the load balancer.