Google Professional Cloud Network Engineer Exam - Topic 1 Question 42 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam

Question #: 42
Topic #: 1

[All Professional Cloud Network Engineer Questions]

You are designing a shared VPC architecture. Your network and security team has strict controls over which routes are exposed between departments. Your Production and Staging departments can communicate with each other, but only via specific networks. You want to follow Google-recommended practices.

How should you design this topology?

ACreate 2 shared VPCs within the shared VPC Host Project, and enable VPC peering between them. Use firewall rules to filter access between the specific networks.

BCreate 2 shared VPCs within the shared VPC Host Project, and create a Cloud VPN/Cloud Router between them. Use Flexible Route Advertisement (FRA) to filter access between the specific networks.

CCreate 2 shared VPCs within the shared VPC Service Project, and create a Cloud VPN/Cloud Router between them. Use Flexible Route Advertisement (FRA) to filter access between the specific networks.

DCreate 1 VPC within the shared VPC Host Project, and share individual subnets with the Service Projects to filter access between the specific networks.

Show Suggested Answer

Suggested Answer: D

by Gilma at May 04, 2022, 06:14 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vincenza

4 months ago

Wait, can you really use FRA for filtering? That’s new to me!

upvoted 0 times

...

Herman

4 months ago

D? Really? That doesn't seem to follow best practices.

upvoted 0 times

...

Shad

4 months ago

C seems a bit overcomplicated for this scenario.

upvoted 0 times

...

Leandro

4 months ago

I think B is better, VPNs add more security.

upvoted 0 times

...

Serita

5 months ago

Option A sounds solid, VPC peering is a good choice!

upvoted 0 times

...

Gayla

5 months ago

I recall that using firewall rules is a common practice for controlling traffic, but I’m not certain if that’s enough for our requirements in this scenario.

upvoted 0 times

...

Sheron

5 months ago

I’m a bit confused about the difference between the Host Project and Service Project in this context. I feel like I might mix them up during the exam.

upvoted 0 times

...

Micaela

5 months ago

I remember that shared VPCs are important for managing resources across departments, but I'm not sure if we need two separate shared VPCs or just one.

upvoted 0 times

...

Mauricio

5 months ago

I think option A sounds familiar because it mentions VPC peering, which we practiced in a similar question about inter-departmental communication.

upvoted 0 times

...

Barney

5 months ago

This question seems straightforward, but I want to make sure I understand the key differences between Microsoft 365 and Azure Virtual Desktop before answering.

upvoted 0 times

...

Bonita

5 months ago

Hmm, I'm not sure about this one. A read-only lock could work, but I'm not confident that would give us the level of control we need over the regions. Let me think this through a bit more.

upvoted 0 times

...

Camellia

5 months ago

Okay, let me see. If there are 5 hardware virtualized guests running, then I would expect to see 5 QEMU-DM processes, one for each guest. That's my best guess.

upvoted 0 times

...