GCP Network

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

GCP Network

GCP Architect Practice Questions about Netoworking VPC VPN ecc

Your office is connected to GCP via a VPN connection. How can you increase the speed of your VPN connection, assuming that your office Internet is not the bottleneck?

A. Apply for a dedicated interconnect option

B. Enable high speed routing in your VPN settings

C. Create an additional VPN tunnel

D. Submit request to increase bandwidth quota

Clear selection

What information is required to connect to an on-premises network router over VPN using Cloud Router for dynamic routing? Choose the 3 correct answers:

A. Remote router DNS name

B. Remote router (peer) IP address

C. Shared secret

D. Border Gateway Protocol address

You need to allow traffic from specific virtual machines in 'subnet-a' network access to machines in 'subnet-b' without giving the entirety of subnet-a access. How can you accomplish this?

A. Create a firewall rule to allow traffic from resources with specific network tags, then assign the machines in subnet-a the same tags.

B. Relocate the subnet-a machines to a different subnet and give the new subnet the needed access.

C. Create a rule to deny all traffic to the entire subnet, then create a second rule with higher priority giving access to tagged VM's in subnet-a.

D. You can only grant firewall access to an entire subnet and not individual VM's inside.

Clear selection

You can SSH into an instance from another instance in the same VPC by its internal IP address, but not its external IP address. What is one possible reason why this is so?

A. The outgoing instance does not have correct permission granted to its service account.

B. The external IP address is disabled.

C. The firewall rule to allow SSH is restricted to the internal VPC.

D. The receiving instance has an ephemeral address instead of a reserved address.

Clear selection

Which of the following are characteristics of GCP VPC subnets? Choose 2 answers

A. Each subnet can span at least 2 Availability Zones to provide a high-availability environment.

B. Each subnet maps to a single Availability Zone.

C. CIDR block mask of /25 is the smallest range supported.

D. By default, all subnets can route between each other, whether they are private or public.

When creating firewall rules, what forms of segmentation can narrow which resources the rule is applied to? (Choose all that apply)

A. Network range in source filters

B. Zone

C. Region

D. Network tags

To set up a virtual private network between your office network and Google Cloud Platform and have the routes automatically updated when the network topology changes, what is the minimal number of each type of component you need to implement?

A. 2 Cloud VPN Gateways and 1 Peer Gateway

B. 1 Cloud VPN Gateway, 1 Peer Gateway, and 1 Cloud Router

C. 2 Peer Gateways and 1 Cloud Router

D. 2 Cloud VPN Gateways and 1 Cloud Router

Clear selection

How are subnetworks different than the legacy networks?

A. They're the same, only the branding is different

B. Each subnetwork controls the IP address range used for instances that are allocated to that subnetwork

C. With subnetworks IP address allocation occurs at the global network level

D. Legacy networks are the preferred way to create networks

Clear selection

Dress4Win has a number of internal backends that they do not want to be exposed to the public Internet. How can they reduce their external exposure while still allowing maintenance access to resources when working remotely?

A. Remove the external IP address and use Cloud Shell to access internal-only resources

B. Remove the external IP address and use a bastion host to access internal-only resources.

C. Remove the external IP address and have remote employees dial into the company VPN connection for maintenance work.

D. Hide the external IP address behind a load balancer and restrict load balancer access to the internal company network.

Clear selection

Which of the following statements on traffic billing in GCP are true?

a. Traffic is free for traffic egress from one region to another, in the same network

b. Traffic is billed for traffic egress to the Internet at a fixed rate across regions

c. Users are billed for VM to VM traffic in a single zone, same region, network

d. Ingress traffic is free between zones within a region

Clear selection

Which of the following statements are correct?

a. Network load balancing only supports HTTP health checks

b. A target pool must be created before it can be used with a forwarding rule

c. A target pool resource defines a group of instances that should receive incoming traffic from forwarding rules.

d. Session affinity does not influence load distribution

Which of the following statements on Network Load Balancers are true?

a. Network Load Balancer is a pass-through, regional load balancer - does not proxy connections from clients type

b. Network Load Balancer distributes traffic based on incoming IP protocol data, such as address, port, and protocol type

c. Network Load Balancer can spread across multiple zones

d. Network Load Balancer is regional

Which of the following statements on load balancing are true?

a. Cross-region load balancing requires DNS load balancer.

b. By default, requests are routed to the closest regions, unless URL maps dictate otherwise.

c. Cross-region load balancing is useful for global user base.

d. Cross-region load balancing applies only to HTTP and HTTPS load balancers.

Which of the following statements are true?

a. Cloud Load Balancing is a fully distributed software defined managed service for any traffic.

b. With cloud load balancing, a single global anycast IP service frontends all backend instances and regions around the world.

c. Google takes care of scaling and managing cloud load balancing services.

d. Cloud load balancing can’t be used for cross region load balancing.

Which of the following VPC Network Peering related statements are true?

a. Network Peering is useful for organizations with separate network administrative domains

b. Network Peering enables services can be made available privately across different VPC networks

c. Network Peering is used to peer with other organizations

d. Network Peering offers lower latency compared to public IP networking

Which of the following statements on network load balancing Target Pools are true?

a. Target pools are a group of instances which receive incoming traffic from forwarding rules

b. Target pools can have backup pools which will receive requests if first pool is unhealthy

c. Network Load Balancing forwards traffic to target pools

d. Target pools can only be used with forwarding rules for TCP and UDP traffic

Which of the following are components of load balancer Backend Services?

a. Session Affinity: Sends requests from the same client to the same VM instance

b. Backends: Instance groups of VMs which are automatically scaled

c. Timeout: The amount of time the backend service waits for a backend to respond

d. Healthcheck: Polls instances to determine which one can receive requests

Which of the following statements on instance groups and templates are correct?

a. Auto-scaler uses rules to determine whether to spin up additional virtual machines within the target pool.

b. An instance template defines a virtual machines.

c. Manage instance groups are created from an instance template.

d. All instances in a managed instance group are based on the same exact type of virtual machines

Which of the following statements regarding Managed Instance Groups are true?

a. If an instance later respond successfully to a specified number of consecutive probes, it is marked healthy again and can receive new connections.

b. After an instance goes down, the health checker continues to pull unhealthy instances.

c. GCP health checks support HTTP and HTTPS only, and does not support TCP, SSL or TLS.

d. To ensure high availability, GCP creates redundant copies of each health checker.

A Compute Engine cluster can use internal load balancing on a private network with auto scaling using Google or 3rd party high availability products.

true

false

Clear selection

Which of the following network related statements are true?

a. Ingress connections require source CIDR ranges, protocols and ports to be defined

b. Source with “allow” specific tags or service accounts permits matching of ingress connections

c. Tags and service accounts cannot be used together in the same firewall rule

d. Source with “deny” specific tags or service accounts blocks the matching of ingress connections

Cloud CDN enables which of the following:

a. Failover

b. Reduced cost

c. Lower latency

d. Reduced load on backend

Cloud load balancing can be used to manage:

a. TCP

b. HTTP

c. SSL

d. UDP

e. HTTPS

Which of the following are GCP interconnect options?

a. Dedicated Interconnect

b. VPN

c. Carrier Peering

d. Direct Peering

Which of the following statements are true?

a. GCP has 3rd party partnerships for CDNs and ISPs

b. Several complex forms of load balancing are available at different levels of the OSI stack

c. Resources in GCP projects are split across VPCs (Virtual Private Clouds)

d. VPCs support various networking features such as DNS, Load balancing, Direct Peering, VPNs and Firewalls

Which of the following statements on load balancing are true?

a. Backend service do not send requests to instances reported as unhealthy by the health check.

b. Client IP affinity directs requests from an IP address to the same server.

c. Firewall rules are not enabled by default and need to be manually configured.

d. Session affinity can be set, so that requests from the same client go to the same instance

Which of the following Direct Peering related statements are true?

a. Direct Peering can be used to reach all of Google’s services include the full suite of GCP products

b. Direct Peering is a direct connection between on-premise network and the Google network at Google’s edge network locations

c. With Direct Peering, BGP routes exchanged for dynamic routing

d. Special billing rates apply for GCP egress traffic, with other traffic billed at standard GCP rates

Which of the following statements regarding Managed Instance Groups are true?

a. In Stackdriver, a user can use metrics to determine whether send an alert or make a configuration change.

b. A health check applies to a scenario where a user specifies the page to reach, and a complex criteria defined to determine under what conditions to send traffic to the page.

c. When creating a health check, periodicity is defined.

d. Virtual machines are created in addition to applying rules to managed instance group

Which of the following statements are true?

a. GCP enables customers to build solutions that are resilient but with a simple network layout.

b. GCP resources in different zones can’t be in the same subnet.

c. The size of a subnet in a custom network can be dynamically increased by expanding the range of IP addresses allocated to it, without affecting the configured VMs.

d. GCP users can create VMs with windows and linux images

Which of the following are considerations for setting Firewall Rules?

a. Source (ingress) IPs and Destination (egress) IPs

b. Priorities and tiebreakers

c. Protocol and port

d. Specific instance names

Which of the following statements on Network Load Balancers are true?

a. Network Load Balancing uses a legacy healthcheck for determining instance health

b. With Network Load Balancing, regardless of the session affinity setting, all packets for a connection are directed to the chosen instance until the connection is closed

c. With Network Load Balancing, session affinity has no impact on load balancing decisions for new incoming connections

d. Network Load Balancing can result in imbalance between backends if long-lived TCP connections are in use

Which of the following network related statements are true?

a. Destinations with “allow” specific tags or service accounts permits matching of egress connections

b. Destinations with “deny” specific tags or service accounts blocks the matching of egress connections

c. Egress connections require destination CIDR ranges, protocols and ports to be defined

d. Tags and service accounts cannot be used together in the same firewall rule

Which of the following statements on load balancing are true?

a. Client IPv6 requests are terminated at the global load balancing layer, then proxied over IPv4 to backends.

b. If the closest instance group does not have enough capacity, requests are sent to the closest group that has capacity.

c. HTTP requests are load balanced over port 443.

d. HTTP(S) requests are load balanced based over port 80.

Which of the following is NOT a valid Instance Group?

a. Unmanaged Instance Group

b. Zonal Managed Instance Group

c. Regional Managed Instance Group

d. None of the options

Map the following statements to steps required to forward an incoming request to a backend instance.

target HTTP proxy determine the backend service

health of each backend instance is verified

backend service--> backend instance

forwarding rule to a target HTTP proxy

Clear selection

Which of the following statements on load balancing are true?

a. Google Cloud DNS is a publish zone and records in the DNS

b. Managed zone maintained by cloud DNS

c. With Google Cloud DNS, there is no burden of managing your own DNS server

d. Managed zone is an entity that manages the DNS records for a suffice

Which of the following statements on Network Load Balancers are true?

a. Network Load Balanced incoming TCP connections are spread across instances and each new connection may go to a different instance

b. SSL Proxy and TCP Proxy support traffic only on a set of specified ports

c. Network Load Balancer is used to load balance UDP traffic, and TCP and SSL traffic on ports that are not supported by the SSL proxy and TCP proxy load balancers

d. Network Load Balancer selects an instance based on a hash of the source IP and port, destination IP and port, and protocol

Which of the following Cloud VPN related statements are true?

a. Does not work with client software on laptop

b. On-premise network has a peer gateway with external static IP on remote network.

c. Cloud VPN supports only IPSec gateway to gateway scenario

d. Remote network can also be another cloud VPC

Which of the following Shared VPC related statements are true?

a. Firewall rules and policies apply to all projects on the network

b. Shared VPC creates a single VPC network of RFC1918 IP spaces that associated projects can use

c. Host Project is a project that hosts the sharable VPC networking resources within a cloud organization

d. Shared VPC is a single network spanning multiple projects

Which of the following network and firewall related statements are true?

a. Shared VPC is a single network

b. A default “allow egress” rule. allows all egress connections. This rule has the lowest priority of 65535

c. A default “deny ingress” rule denies all ingress connections. This rule has the lowest priority of 65535

d. Tags and service accounts cannot be used together in the same firewall rule

Which of the following statements on load balancing are correct?

a. Content based load balancing applies to HTTP and HTTPS only.

b. HTTP load balancer requires a single global static IP address representing the entire frontend application.

c. HTTP load balancer can be used to route traffic between multiple regions and multiple zones.

d. Global load balancer are used where HTTP(S) requests enter the Google network.

Which of the following are types of Load Balancing?

a. Network Load Balancing

b. Cross-Region Load Balancing

c. Cloud SSL Proxy

d. HTTPS Load Balancing

e. Content-based Load Balancing

Which of the following statements related to networking and Virtual Private Clouds (VPC) are free?

a. VPCs support multi-tenancy. VPC can be shared across GCP projects

b. VPCs are global. Resources from across zones and regions

c. VPCs are scalable. New VMs and containers can be added to networks.

d. VPCs are private and secure by default. IAM, firewall rules are used to secure VPCs

Bastion hosts have an External IP and an Internal IP.

true

false

Clear selection

Which of the following statements on Load Balancing are true?

a. Load balancers are internal and external

b. Load balancing can be external, internal, global or regional

c. Load balancing routes traffic to the closest VM to the user, so long as it has sufficient capacity

d. Load balancing is a fully managed service with redundant and highly available components

Which of the following statements related to networking are true?

a. Subnets in GCP can contain resources from a single region

b. Each subnet has a contiguous private RFC1918 IP space

c. IP address ranges cannot overlap between subnets

d. Resources in separate networks communicate via a public IP

Which of the following DNS Resolution statements are true

a. Admins can publish public DNS records pointing to instance internal IP

b. Public DNS records are published automatically

c. Each instance has a hostname that can be resolved to an internal IP address

d. Users connect directly to instances using internal IP address

Clear selection

Which of the following statements on load balancing are true?

a. TCP proxy load balancing automatically routes traffic to the instances that are geographically closest to the user.

b. TCP proxy load balancing terminates traffic at the global load balancing layer

c. TCP proxy load balancing enables intelligent routing and security patching.

d. TCP proxy load balancing can a separate TCP or SSL connection to the selected backend instance.

Option 1

Clear selection

Which of the following statements related to networking and Virtual Private Clouds (VPC) are true?

a. VPC is divided into subnets, a logical partitioning of a network

b. A single VPC can contain up to 7000 VMs

c. A single project has a quota of 5 networks

d. VPC provides global, scalable, flexible networking for cloud based services

Which of the following Health check related statements are true?

a. Use TCP healthchecks to configure SSL healthchecks if traffic is not HTTPS but is encrypted via SSL(TLS)

b. HTTP(S) healthchecks provide the highest fidelity check because they verify that the web server is up and serving traffic, not just that the instance is healthy.

c. Use HTTP, HTTPS healthchecks if your traffic is HTTP(S)

d. TCP and SSL health checks can be used when the service expects a TCP or SSL connection that is not HTTP(S) or HTTP/2

Which of the following are GCP availability policies?

a. Maintenance shutdown

b. Live migration

c. Multi-regional global load balancing

d. Auto restart

Which of the following statements regarding Managed Instance Groups are true?

a. Managed Instance Groups offer autoscaling capabilities to automatically add or remove instances from a managed instance group based on increases or decreases in load.

b. Autoscaling enables applications to gracefully handle increases in traffic and reduces costs when the need for resources is lower.

c. Autoscaler performs automatic scaling based on the measured load and autoscaling policy.

d. Autoscaling works by scaling up or down your instance group.

Which of the following statements related to external IP addresses are true?

a. External IPs are static and reserved.

b. External IPs are available until explicitly released.

c. Unassigned static IP addresses incur a cost.

d. External IPs can be global or regional.

Clear selection

Which of the following statements on load balancing Backends is true?

a. With Backend buckets, traffic is directed to the bucket instead of a backend

b. Backend buckets are Cloud Storage buckets with HTTPS load balancing

c. Backends can be VM instances or Backend buckets.

d. Backend buckets are useful in load balancing requests to static content

Which of the following statements related to firewalls are true?

a. Firewall rules exist between instances in the same network

b. Firewall rule has to be configured for packets to traverse the route

c. Firewall rules exist between instances and other networks

d. For a packet to reach its destination, the route is not sufficient

Map GCP interconnect options.

Carrier Peering

Direct Peering

VPN Tunnel

Ded.Interconnect

Priv-conn / partner network

Priv-conn Hybrid cloud workloads

Priv-conn to Google cloud at Google POPs

Secure multi-Gbps conn over the Internet

Which of the following are statements on session affinity are true?

a. Users that move networks across networks might loose affinity with Client IP based session affinity

b. Cookies are better, and GCP issues a cookie named GBLB in the first request, ensuring that subsequent requests from the client are sent to the same instance

c. With Client IP option, requests from different users might appear to originate from the same IP

d. Client IP session affinity is achieved with a hash of IP address to enable requests to be sent from the same IP to the same VM

Which of the following statements on Autoscaling are true?

a. Autoscaler can only scale up resources

b. Autoscaling is fast, typically 1 min windows

c. Before an instance is terminated, autoscaler validates connections and gracefully shut down any applications or systems

d. Shutdown scripts are executed when a instance is terminated by autoscaler

Cloud CDN enables which of the following.

a. Reduced load on backend

b. Failover

c. Reduced cost

d. Lower latency

Which of the following statements on network load balancing Target Pools are true?

a. Target pools can have backup pools which will receive requests if first pool is unhealthy

b. If primary target pool’s ration is below the failoverRatio, traffic is sent to the backup pool, rather than the primary pool

c. failoverRatio is the ratio of healthy instances to failed instances in a pool

d. Healthchecks are configured to check the health of instances in target pools

Which of the following statements on TCP Proxy Load Balancing are true?

a. TCP Proxy Load Balancing is more intelligent than with network layer load balancing

b. TCP Proxy Load Balancing Traffic is not encrypted

c. TCP Proxy Load Balancing offers better security, enabling TCP vulnerabilities to be patched at the load balancer

d. TCP Connections are terminated at the global layer and may by proxied to the closest available instance group using TCP connections or SSL

Which of the following statements on GCP resources are true?

a. Disk images and snapshots are a regional GCP resource

b. VM instances are zonal resources.

c. Global resources include static external IP addresses.

d. Networks are a global GCP resource.

Which of the following statements on the operation of a Managed Instance Groups are true?

a. When using a Managed Instance Group, disk data might be lost unless explicitly snapshotted and backup

b. When using a Managed Instance Group, the new instance is re-created based on the template used to originally create it

c. Typically, healthchecks are configured for both Load Balancer and Managed Instance Group

d. Managed instance groups healthchecks require a check interval to be configured

Which of the following statements related to Internal IP addresses are true?

a. Internal IP address can only be use within a VPC.

b. Internal IP addresses are typically ephemeral and changes every 24 hours or on VM restart

c. VMs know their internal IP address, with VM name and IP available to the network DNS

d. Internal IP addresses cannot be used across VPCs, unless there is a special configuration such as shared VPC or VPNs

Which of the following statements on traffic billing in GCP are true?

a. Users are billed for Traffic to GCP services

b. Traffic is billed for traffic egress to the Internet

c. Traffic is billed for traffic egress from one region to another

d. Ingress traffic is free between zones within a region

Which of the following DNS Resolution statements are true

a. FQDN format is [hostname].c.[project-id].internal

b. Hostname is the same as the instance name

c. Name resolution is handled by an external DNS resolver

d. Instances with external IP addresses can allow connections from hosts outside of the project

Which of the following statements are characteristics of Firewalls as a Resource?

a. By default, firewalls defaults to allows ingress

b. Firewalls control incoming traffic but have no impact over traffic priority

c. Firewalls are regional resources

d. Firewall Tags include rules for ICMP, SSH and RDP access

Which of the following can break session affinity?

a. An instance group runs out of capacity and traffic is routed to another zone.

b. The target instance fails health checks.

c. Load balancing serving capacity is modified.

d. Too many user requests are made

Which of these statements are true?

a. Do not delete an instance group if it is being used by a backend

b. It is recommended to put virtual machine instances in more than one instance group.

c. Where the same instance group is added to two backends, both backends can have separate balancing mode of either utilization or rate defined.

d. Tagging can be used to automatically remove virtual machines from the load balancer when testing failures

Which of the following statements relating to Autoscaler are true?

a. If more resources are needed, autoscaler chooses between increasing the number of CPU by a % of the existing CPUs or adding more instances, whichever is larger

b. Autoscaler takes into account sudden increases in traffic that do not warrant scaling

c. With an average target CPU utilization of 0.75, CPU utilization is maintained 75% across all instances

d. With autoscaling, the target utilization level, level at which to maintain VMs is interpreted differently based on autoscaling policy that is selected.

Which of the following VPC Network Peering related statements are true?

a. Peered networks are completely separate and can be from different organizations

b. Network Peering enables private RFC1918 connectivity across two VPC networks

c. Network Peering is used to build SaaS ecosystem in GCP

d. Networks can be in the same or different projects

Which of the following statements related to IP addresses are true?

a. DNS records for external IP addresses needs to be published.

b. Hostname is mapped to internal IP

c. VPC networks automatically resolve the internal IP addresses to the hostname

d. Hosts with external IPs allow connection from outside the VPC

Which of the following statements on Cross Region Load Balancing are true?

a. Relies on DNS-based load balancing

b. Automatically re-routes requests to closest region once capacity is reached

c. Supports TCP and UDP load balancing

d. Cross-region load balancing uses an internal IP address

Which of the following statements on Instance Templates are true?

a. Changes to the instance group changes all instances in the group

b. Instance template defines the machine type, image, zone and other properties of an instance.

c. Instance template refers to a public or custom image used to create identical VMs

d. Instance templates provide a way to save the instance configuration for creating new instances or groups of instances

Which of the following applies to Static Routing?

a. VPN tunnel can be scaled horizontally through parallel tunnels

b. Static Routing required the use of private IP on both peers

c. With static routing, updating the tunnel requires the addition of static routes to Google Cloud Platform and restarting the VPN tunnel to include the new subnet.

d. Static Routing can only be Global and is not a regional GCP resource

Which of the following statements on GCP IPv6 support is true?

a. GCP allows instances to appear as IPv6 services to IPv6 clients

b. Load balancer accepts IPv6 connections and forward those over IPv6 to virtual machines

c. GCP support IPv6 clients using HTTP(S), SSL proxy and TCP proxy load balancing

d. Only IPv4 clients are supported on the GCP

Which of the following Shared VPC related statements are true?

a. Host Project is a project that hosts the sharable VPC networking resources within a cloud organization

b. Shared VPC is a single network spanning multiple projects

c. Firewall rules and policies apply to all projects on the network

d. Shared VPC creates a single VPC network of RFC1918 IP spaces that associated projects can use

A different team is responsible for implementing a tier 1 external LB and another team a tier 2 internal LB. Which of the following statements are true?

a. Each project admin can manage their own resources separately, with each project separately billed

b. Single group of network and security admins in charge of network connectivity and security rules for the shared VPC

c. Both LBs can be configured in separate projects under the management of the separate teams

d. Projects can be configured in a shared VPC as both load balancers are part of the application infrastructure

Which of the following are basic components of HTTP(S) load balancing?

a. Backends

b. Target proxy

c. URL map

d. Backend service

Which of the following statements on URL routing are true?

a. Requests are always routed to the instance group that is closest to the user.

b. GCP HTTP(S) load balancing provides global load balancing for HTTP(S) requests.

c. URL rules are used to route URLs to instances.

d. HTTP(S) load balancing supports both IPv4 and IPv6 IP addresses for client traffic.

Which of the following Healthcheck related statements are true?

a. Use SSL (TLS) healthchecks for all TCP traffic that is not HTTP(S) or SSL(TLS)

b. Use HTTP, HTTPS healthchecks if your traffic is HTTP(S)

c. Use TCP healthchecks to configure SSL healthchecks if traffic is not HTTPS but is encrypted via SSL(TLS)

d. HTTP(S) healthchecks provide the highest fidelity check because they verify that the web server is up and serving traffic, not just that the instance is healthy.

Which of the following need to be configured for a Managed Instance Group?

a. Check interval: The time to wait between attempts to check instance health

b. Health Threshold: How many consecutive “healthy” responses indicate that the VM is healthy

c. Timeout: The length of time to wait for a response before declaring the check attempt failed

d. Unhealthy Threshold: How many consecutive “failed” responses indicate VM is unhealthy

Which of the following are components of load balancer Backend Services?

a. Session Affinity: Sends requests from the same client to the same VM instance

b. Timeout: The amount of time the backend service waits for a backend to respond

c. Backends: Instance groups of VMs which are automatically scaled

d. Healthcheck: Polls instances to determine which one can receive requests

Which of the following VPC Network Peering related statements are true?

a. For VMs with multiple network cards, only IP within the peered networks can communicate with each other

b. Two shared VPCs can also be peered

c. A network can be peered with a shared VPC

d. A VM on a peered network can communicate with each other using the internal IP

Which of the following Direct Peering related statements are true?

a. Special billing rates apply for GCP egress traffic, with other traffic billed at standard GCP rates

b. Direct Peering can be used to reach all of Google’s services include the full suite of GCP products

c. With Direct Peering, BGP routes exchanged for dynamic routing

d. Direct Peering is a direct connection between on-premise network and the Google network at Google’s edge network locations

Which of the following VPC Network Peering related statements are true?

a. Peered networks enables load balancer in one network to automatically balance traffic to VMs in the peered network without any additional network configuration

b. Within peered networks, firewalls are the only way to block traffic to certain instances

c. Firewall rules are important in peering because all instances in the peered networks can communicate with each other

d. Only directly peered networks can communicate

Which of the following Cloud Router and Dynamic Route related statements are true?

a. Network automatically and rapidly discover changes

b. Dynamic routes are implemented using Cloud Router without disrupting traffic

c. A VPN tunnel connects a gateway at either end

d. Cloud Router peers with the on-premise gateway and uses BGP to exchange route information between networks

Which of the following are benefits offered by Managed Instance Groups on the GCP platform?

a. In addition to manage instance groups that belong in single zones, you can create regional Managed Instance Groups which distribute instances across multiple zones in the same region.

b. A recreated instance uses the same name and the same instance template as a previous instance, even if the group references a different instance template.

c. Regional managed instant groups support autoscaling, network load balancing, and HTTPS load balancing.

d. Managed Instance Groups can automatically identify and recreate unhealthy instances in a group to ensure that all the instances are running optimally.

Which of the following can be defined as specific rules for a Managed Instance Group?

a. Locations

b. Ports for load balancing

c. Single or multi zoned

d. Auto scale

Which of the following statements related to external IP addresses are true?

a. External IPs are static and reserved.

b. External IPs are available until explicitly released.

c. Unassigned static IP addresses incur a cost.

d. External IPs can be global or regional.

Which of the following Cloud VPN related statements are true?

a. IPsec standard protocol enables authentication, integrity and confidentiality

b. Secure IPsec tunnels Google VPC network to on premise network

c. Multiple tunnels can connect with a single on-premise gateway

d. Google enables site to site VPN with 99.9% service availability SLA

Which of the following statements are characteristics of Firewalls as a Resource?

a. By default, firewalls defaults to allows ingress

b. Firewalls are regional resources

c. Firewalls control incoming traffic but have no impact over traffic priority

d. Firewall Tags include rules for ICMP, SSH and RDP access

A Compute Engine cluster can use internal load balancing on a private network with auto scaling using Google or 3rd party high availability products.

True

False

Clear selection

Which of the following Virtual Private Networks (VPN) statements are true?

a. Cloud VPN delivers high throughput IPsec tunnels

b. Cloud VPN leverages Google’s global Edge locations to minimize latency

c. Cloud VPN is a high throughput, high reliability, managed service

d. Cloud VPN can only run over a single VPN tunnel

Which of the following statements relating to Autoscaler are true?

a. HTTP(S) load Balancing Server Capacity autoscaling policy only works with CPU utilization and max request per second / instance

b. Autoscaler scaling is based on the policy that defines the largest number of VM instances

c. All of the options

d. Autoscalers can make scaling decisions based on multiple policies.

Clear selection

Which of the following Cloud VPN related statements are true?

a. CIDR IP address range on the client network should not conflict with the cloud IP address range on the VPC

b. VPN tunnel needs to know the destination IPs allowed and create routes to forward packets to those IPs

c. Site to site VPN allows multiple tunnels to a single VPN gateway

d. VPN traffic has to traverse the Internet

Which of the following network related statements are true?

a. Egress connections require destination CIDR ranges, protocols and ports to be defined

b. Tags and service accounts cannot be used together in the same firewall rule

c. Destinations with “allow” specific tags or service accounts permits matching of egress connections

d. Destinations with “deny” specific tags or service accounts blocks the matching of egress connections

A user is processing videos and has a global forwarding rule which sends requests to a HTTP proxy. They would like to handle HD videos separate from standard definition videos. They map each request type to a different backend service. A high definition service uses a URL match to send it to different rules. The rule is used to determine the SDs backend service. Can this requirement be implemented on the GCP?

True

False

Clear selection

With Internal Load Balancing, the backend instance for a client is selected using a hashing algorithm that takes instance health into consideration using a 5-tuple hash. Which of the following parameters are used for hashing?

a. Client source IP

b. Protocol (either TCP or UDP)

c. Destination IP (the load balancing IP)

d. Destination port

e. Client port

Which of the following statements related to VPC networks are true?

a. Firewall rules have to be explicitly configured to allow packets to reach the destination

b. When a network is created, a default route is created for Internet traffic

c. Routes are necessary but not sufficient condition to get packet to destination

d. There is at least one route for every subnet that is created to ensure traffic can reach the subnet

Which of the following statements related to IP addresses are true?

a. Hostname is mapped to internal IP

b. VM unaware of external IP

c. Hosts with external IPs allow connection from outside the VPC

d. VM aware of internal IP

Which of the following statements related to firewalls are true?

a. Firewall rules can be created to allow or deny specific connections based on a combination of IP address, ports and protocol

b. Traffic to instances within a custom VPC network are blocked by a firewall by default, unless rules are created to allow it

c. With default VPC network, firewalls are created automatically within each project

d. Firewall rules protect VM instances from unapproved connections, both inbound (ingress) and outbound (egress)

Which of these statements are true?

a. When resizing a managed instance group, the maximum size of the group should be smaller than or equal to the size of the subnet.

b. Cloud administrators can use both the maxUtilization and maxRate per instance mode.

c. For enhanced security, a bastion host should be used to manage instances after disabling their external IP address.

d. An instance group serving two or more ports for several backends needs to specify different port names in the instance group

Which of the following statements are true?

a. With cloud load balancing, only healthy backends receive traffic.

b. Cloud load balancing provides automatic multi-region failover.

c. With cloud load balancing, pre-warming is required.

d. Cloud load balancing backends are selected based on load.

Which of the following statements are true?

a. Service account is restricted by IAM permissions.

b. Tags can be changed by any user who can edit an instance

c. Changing a service account requires stopping and restarting an instance

d. IAM Permission to start an instance with a service account has to be explicitly given

Network Load Balancing target pools consist of which of the following?

a. Description

b. Name

c. Region

d. Multi-regional Instances

Which of the following statements related to Internal Load Balancing are true?

a. With Multiple instance groups, all instances are treated as if they are in a single pool and the load balancer distributes traffic among them using the load balancing algorithm

b. Internal Load Balancing is a managed service, and no additional charge needed to ensure high availability

c. Internal Load Balancing is useful for balancing requests from frontend instances to backend instances

d. Internal Load Balancing configures multiple instance groups in different zones to guard against failures in a single zone

Which of the following statements relating to VPC are true?

a. VPC operate over the public Internet

b. Only one VPC mode exists

c. VPC enables hybrid integration between two network

d. VPCs can be connected via a Shared VPC

e. VPC supports private peering between two network

Which of the following statements are true?

a. VPC firewall rules can be defined in terms of metadata tags on compute engine instances.

b. VPC peering enables two VPCs in different projects to exchange traffic.

c. Shares VPC enables full IAM capability where a user’s access can be restricted across two projects sharing a VPC.

d. Shared VPC can be used to share a network or individual subnets with other GCP projects

Which of the following Shared VPC related statements are true?

a. Instance on a shared VPC need to be created explicitly for the VPC

b. A project cannot be a service and host project at the same time

c. A service project can only be associated with a single host

d. Instances in a project can only be assigned external IPs from the same project

e. Existing projects can use a shared VPC network

Which of the following statements regarding Managed Instance Groups are true?

a. A health check is similar to Stackdriver in that a user specifies the page to reach, and a complex criteria defined to determine under what conditions to send traffic to the page.

b. When creating a health check, periodicity and health check are defined.

c. In Stackdriver, a user can use metrics to determine whether send an alert or make a configuration change.

d. Essentially, virtual machines are created in addition to applying rules to the instance group

Which of the following statements regarding Managed Instance Groups are true?

a. Redundant health checkers probe instances.

b. If any health checker fails, manual intervention is required for the redundant to take over.

c. To ensure high availability, GCP creates redundant copies of each health checker.

d. .Redundant health checkers are created automatically and are not separately user configurable

Which of the following statements on load balancing are true?

a. URL maps are where traffic is routed based on the information in the URL body.

b. Traffic allocation decisions are based on health checks, URL rewrites and protocols.

c. Traffic allocation for backend services take into account the zone, region or multiple regions.

d. New connection can end up on any instance, but subsequent requests are routed to the same instance if the instance is healthy and able to handle additional requests.

Which of the following is NOT a valid Instance Group?

a. Regional Managed Instance Group

b. Unmanaged Instance Group

c. Zonal Managed Instance Group

d. None of the options

Clear selection

Which of the following statements related to IP addresses are true?

a. GCP simplified traffic management by not requiring containers to perform their own routing

b. VPCs automatically set up routes for IPs allocated from Alias IP Ranges

c. Infrastructure services can draw from a primary IP range and containers from the secondary range

d. Alias IP Ranges enables multiple containers or services on a VM can have their own IP

Which of the following statements on Routing are true?

a. Default Routes work out of the box on the GCP platform

b. Clients are unable to configure custom routes

c. Routing controls the flow of data and direct traffic to its destination

d. When using Statics Routes, the VPN tunnel does not need to be restarted if a new Subnet is added.

When creating firewall rules, what forms of segmentation can narrow which resources the rule is applied to? (Choose all that apply)

A. Network range in source filters

B. Zone

C. Region

D. Network tags

Your business is connected to a VPN connection to GCP. On GCP, you are hosting an internal website using an HTTP load balancer which serves traffic to a managed instance group. Your users are unable to access the internal website, though all systems are up. What is a possible cause for this problem?

A. You've enabled static IP address for the managed instance group servers.

B. Your load balancer is not set for the correct region.

C. Firewall rules are not correctly configured.

D. You need to enable Stackdriver debugger to collect more information.

Clear selection

Your company is building a large-scale web application. Each team is responsible for its own service component of the application and wants to manage its own individual projects. You want each service to communicate with the others over RFC1918 address space. What should you do?

A. Deploy each service into a single project within the same VPC.

B. Configure Shared VPC and add each project as a service of the Shared VPC project.

C. Configure each service to communicate with the others over HTTPS protocol.

D. Configure a global load balancer for each project and communicate between each service using the global load balancer IP addresses.

Clear selection

Submit

Clear form

This form was created inside of Information Design. Report Abuse

Forms