次の認定試験に速く合格する！

簡単に認定試験を準備し、学び、そして合格するためにすべてが必要だ。

会員センターカート (0)

Professional-Cloud-Network-Engineer 無料問題集「Google Cloud Certified - Professional Cloud Network Engineer」

ページ: 1 / 18
トータル 213 問

サインアップ、ログインされた後に、試験全体を無料で表示できるようになります。

質問 1

You are configuring a new HTTP application that will be exposed externally behind both IPv4 and IPv6 virtual IP addresses, using ports 80, 8080, and 443. You will have backends in two regions: us-west1 and us-east1. You want to serve the content with the lowest-possible latency while ensuring high availability and autoscaling, and create native content-based rules using the HTTP hostname and request path. The IP addresses of the clients that connect to the load balancer need to be visible to the backends. Which configuration should you use?

（A）Use External HTTP(S) Load Balancing with URL Maps and custom headers

（B）Use External HTTP(S) Load Balancing with URL Maps and an X-Forwarded-For header

（C）Use Network Load Balancing

（D）Use TCP Proxy Load Balancing with PROXY protocol enabled

正解：B 解答を投票する

質問 2

You work for a university that is migrating to GCP.
These are the cloud requirements:
* On-premises connectivity with 10 Gbps
* Lowest latency access to the cloud
* Centralized Networking Administration Team
New departments are asking for on-premises connectivity to their projects. You want to deploy the most cost-efficient interconnect solution for connecting the campus to Google Cloud.
What should you do?

（A）Use standalone projects, and deploy the VLAN attachments in the individual projects. Connect the VLAN attachment to the standalone projects' Interconnects.

（B）Use Shared VPC, and deploy the VLAN attachments and Interconnect in the host project.

（C）Use standalone projects and deploy the VLAN attachments and Interconnects in each of the individual projects.

（D）Use Shared VPC, and deploy the VLAN attachments in the service projects. Connect the VLAN attachment to the Shared VPC's host project.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

You have the following Shared VPC design VPC Flow Logs is configured for Subnet-1 In the host VPC. You also want to monitor flow logs for Subnet-2. What should you do?

（A）Configure VPC Flow Logs in the service project VPC for Subnet-2.

（B）Configure a VPC Flow Logs filter for Subnet-2 in the host project VPC.

（C）Configure Packet Mirroring in both the host and service project VPCs.

（D）Configure a firewall rule to permit Subnet-2 IP addresses outbound in the host protect VPC.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

You work for a university that is migrating to Google Cloud.
These are the cloud requirements:
On-premises connectivity with 10 Gbps
Lowest latency access to the cloud
Centralized Networking Administration Team
New departments are asking for on-premises connectivity to their projects. You want to deploy the most cost-efficient interconnect solution for connecting the campus to Google Cloud.
What should you do?

（A）Use standalone projects and deploy the VLAN attachments and Dedicated Interconnects in each of the individual projects.

（B）Use standalone projects, and deploy the VLAN attachments in the individual projects. Connect the VLAN attachment to the standalone projects' Dedicated Interconnects.

（C）Use Shared VPC, and deploy the VLAN attachments in the service projects. Connect the VLAN attachment to the Shared VPC's host project.

（D）Use Shared VPC, and deploy the VLAN attachments and Dedicated Interconnect in the host project.

正解：D 解答を投票する

質問 5

You need to enable Private Google Access for some subnets within your Virtual Private Cloud (VPC). Your security team set up the VPC to send all internet-bound traffic back to the on-premises data center for inspection before egressing to the internet, and is also implementing VPC Service Controls for API-level security control. You have already enabled the subnets for Private Google Access. What configuration changes should you make to enable Private Google Access while adhering to your security team's requirements?

（A）Create a private DNS zone with a CNAME record for *.googleapis.com to private.googleapis.com, with an A record pointing to Google's private API address range.
Create a custom route that points Google's private API address range to the default internet gateway as the next hop.

（B）Create a private DNS zone with a CNAME record for *.googleapis.com to private.googleapis.com, with an A record pointing to Google's private API address range.
Change the custom route that points the default route (0/0) to the default internet gateway as the next hop.

（C）Create a private DNS zone with a CNAME record for *.googleapis.com to restricted.googleapis.com, with an A record pointing to Google's restricted API address range.
Change the custom route that points the default route (0/0) to the default internet gateway as the next hop.

（D）Create a private DNS zone with a CNAME record for *.googleapis.com to restricted.googleapis.com, with an A record pointing to Google's restricted API address range.
Create a custom route that points Google's restricted API address range to the default internet gateway as the next hop.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

You have ordered Dedicated Interconnect in the GCP Console and need to give the Letter of Authorization/Connecting Facility Assignment (LOA-CFA) to your cross-connect provider to complete the physical connection.
Which two actions can accomplish this? (Choose two.)

（A）Open a Cloud Support ticket under the Cloud Interconnect category.

（B）Contact your cross-connect provider and inform them that Google automatically sent the LOA/CFA to them via email, and to complete the connection.

（C）Run gcloud compute interconnects describe <interconnect>.

（D）Download the LOA-CFA from the Hybrid Connectivity section of the GCP Console.

（E）Check the email for the account of the NOC contact that you specified during the ordering process.

正解：B、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

You need to create a GKE cluster in an existing VPC that is accessible from on-premises. You must meet the following requirements:
IP ranges for pods and services must be as small as possible.
The nodes and the master must not be reachable from the internet.
You must be able to use kubectl commands from on-premises subnets to manage the cluster.
How should you create the GKE cluster?

（A）* Create a VPC-native GKE cluster using user-managed IP ranges.
* Enable privateEndpoint on the cluster master.
* Set the pod and service ranges as /24.
* Set up a network proxy to access the master.

（B）* Create a VPC-native GKE cluster using user-managed IP ranges.
* Enable a GKE cluster network policy, set the pod and service ranges as /24.
* Set up a network proxy to access the master.
* Enable master authorized networks.

（C）* Create a VPC-native GKE cluster using GKE-managed IP ranges.
* Set the pod IP range as /21 and service IP range as /24.
* Set up a network proxy to access the master.

（D）* Create a private cluster that uses VPC advanced routes.
* Set the pod and service ranges as /24.
* Set up a network proxy to access the master.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

You recently deployed Compute Engine instances in regions us-west1 and us-east1 in a Virtual Private Cloud (VPC) with default routing configurations. Your company security policy mandates that virtual machines (VMs) must not have public IP addresses attached to them. You need to allow your instances to fetch updates from the internet while preventing external access. What should you do?

（A）Create a firewall rule that allows egress to destination 0.0.0.0/0.

（B）Create a single global Cloud NAT gateway and global Cloud Router in the VPC.

（C）Change the instances' network interface external IP address from None to Ephemeral.

（D）Create a Cloud NAT gateway and Cloud Router in both us-west1 and us-east1.

正解：D 解答を投票する

質問 9

You have an application that is running in a managed instance group. Your development team has released an updated instance template which contains a new feature which was not heavily tested. You want to minimize impact to users if there is a bug in the new template.
How should you update your instances?

（A）Manually patch some of the instances, and then perform a rolling restart on the instance group.

（B）Using the new instance template, perform a rolling update across all instances in the instance group. Verify the new feature once the rollout completes.

（C）Perform a canary update by starting a rolling update and specifying a target size for your instances to receive the new template. Verify the new feature on the canary instances, and then roll forward to the rest of the instances.

（D）Deploy a new instance group and canary the updated template in that group. Verify the new feature in the new canary instance group, and then update the original instance group.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

You configured Cloud VPN with dynamic routing via Border Gateway Protocol (BGP). You added a custom route to advertise a network that is reachable over the VPN tunnel. However, the on-premises clients still cannot reach the network over the VPN tunnel. You need to examine the logs in Cloud Logging to confirm that the appropriate routers are being advertised over the VPN tunnel. Which filter should you use in Cloud Logging to examine the logs?

（A）resource.type= "gce_network_region"

（B）resource.type= "vpn_tunnel"

（C）resource.type= "gce_router"

（D）resource.type= "vpn_gateway"

正解：B 解答を投票する

質問 11

Your frontend application VMs and your backend database VMs are all deployed in the same VPC but across different subnets. Global network firewall policy rules are configured to allow traffic from the frontend VMs to the backend VMs. Based on a recent compliance requirement, this traffic must now be inspected by network virtual appliances (NVAs) firewalls that are deployed in the same VPC. The NVAs are configured to be full network proxies and will source NAT-allowed traffic. You need to configure VPC routing to allow the NVAs to inspect the traffic between subnets. What should you do?

（A）Create your NVA with multiple interfaces. Configure NIC0 for NVA in the backend subnet. Configure NIC1 for NVA in the frontend subnet. Place your NVAs behind an internal passthrough Network Load Balancer named ilb1. Add global network firewall policy rules to allow traffic through your NVAs. Create a custom static route with the destination IP range of the backend VM subnet, frontend instance tag, and the next hop of ilb1. Add a frontend network tag to your frontend VMs.

（B）Place your NVAs behind an internal passthrough Network Load Balancer named ilb1. Add global network firewall policy rules to allow traffic through your NVAs. Create a policy-based route (PBR) with the source IP range of the frontend VM subnet, destination IP range of the backend VM subnet, and the next hop of ilb1. Scope the PBR to the VMs with the frontend network tag. Add a frontend network tag to your frontend servers.

（C）Place your NVAs behind an internal passthrough Network Load Balancer named ilb1. Add global network firewall policy rules to allow traffic through your NVAs. Create a custom static route with the destination IP range of the backend VM subnet, frontend instance tag, and the next hop of ilb1. Add a frontend network tag to your frontend VMs.

（D）Place your NVAs behind an internal passthrough Network Load Balancer named ilb1. Add the global network firewall policy rules to allow traffic through your NVAs. Create a policy-based route (PBR) with the source IP range of the backend VM subnet, destination IP range of the frontend VM subnet, and the next hop of ilb1. Scope the PBR to the VMs with the backend network tag. Add a backend network tag to your backend servers.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

Your team deployed two applications in GKE that are exposed through an external Application Load Balancer. When queries are sent to www.mountkirkgames.com/sales and www.mountkirkgames.com/get-an-analysis, the correct pages are displayed. However, you have received complaints that www.mountkirkgames.com yields a 404 error. You need to resolve this error. What should you do?

（A）Review the Ingress YAML file. Add a new path rule for the * character that directs to the base service. Reapply the YAML.

（B）Review the Service YAML file. Add a new path rule for the * character that directs to the base service. Reapply the YAML.

（C）Review the Ingress YAML file. Define the default backend. Reapply the YAML.

（D）Review the Service YAML file. Define a default backend. Reapply the YAML.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

ページ: 1 / 18
トータル 213 問

Professional-Cloud-Network-Engineer の機能をすべて解除する

キャプチャ不要
365日無料更新サービス
希望する合格率を設定できる
時間の割り当てられる（時間：分）
Professional-Cloud-Network-Engineer に2つの練習用モード
サポートサービス対応

完全版を入手する

弊社を連絡する

我々は１２時間以内ですべてのお問い合わせを答えます。

オンラインサポート時間：( UTC+9 ) 9:00-24:00
月曜日から土曜日まで

サポート：現在連絡

トップ試験

PSE-Strata-Pro-24 試験問題集
2V0-11.24 試験問題集
CAD 試験問題集
Ethics-In-Technology 試験問題集
CRT-211 試験問題集
SPLK-1004 試験問題集

Professional-Cloud-Network-Engineer 無料問題集「Google Cloud Certified - Professional Cloud Network Engineer」

弊社を連絡する

関連リンク

トップ試験