Google Professional Cloud Network Engineer Exam - Topic 2 Question 39 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam

Question #: 39
Topic #: 2

[All Professional Cloud Network Engineer Questions]

In order to provide subnet level isolation, you want to force instance-A in one subnet to route through a security appliance, called instance-B, in another subnet.

What should you do?

ACreate a more specific route than the system-generated subnet route, pointing the next hop to instance-B with no tag.

BCreate a more specific route than the system-generated subnet route, pointing the next hop to instance-B with a tag applied to instance-A.

CDelete the system-generated subnet route and create a specific route to instance-B with a tag applied to instance-A.

DMove instance-B to another VPC and, using multi-NIC, connect instance-B's interface to instance-A's network. Configure the appropriate routes to force traffic through to instance-A.

Show Suggested Answer

Suggested Answer: B

by Melodie at May 06, 2022, 03:19 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alfreda

4 months ago

Wait, moving instance-B to another VPC? That’s a bit much, right?

upvoted 0 times

...

Royce

4 months ago

D seems overly complicated for this scenario.

upvoted 0 times

...

Ilda

4 months ago

C sounds risky, deleting system routes can cause issues.

upvoted 0 times

...

Ruthann

4 months ago

I think B could work too, tagging might help with routing.

upvoted 0 times

...

Rebbecca

5 months ago

A is the way to go, more specific routes are key!

upvoted 0 times

...

Patti

5 months ago

Moving instance-B to another VPC seems like overkill for just routing traffic. I think I’d lean towards option B, but I’m not entirely confident about the tagging part.

upvoted 0 times

...

Leonardo

5 months ago

I feel like deleting the system-generated route might cause issues. I think I should create a more specific route instead, but I'm torn between A and C.

upvoted 0 times

...

Yoko

5 months ago

I remember we discussed routing and how specific routes can override default ones, but I'm not sure if I need a tag or not.

upvoted 0 times

...

Lai

5 months ago

This question feels similar to one we practiced about routing through a firewall. I think option A might be the right choice, but I can't recall the tagging details.

upvoted 0 times

...

Eun

5 months ago

I'm pretty sure cellular usage would be under the Monitoring section, since that's where you'd expect to find device-level metrics and statistics.

upvoted 0 times

...

Charisse

5 months ago

Hmm, I'm a bit confused on this one. I know it has something to do with testing controls, but I'm not sure if controlled reprocessing or input validation would also be considered valid answers.

upvoted 0 times

...

Emelda

5 months ago

Okay, let's see. The key here is understanding how the mv command works on the same filesystem.

upvoted 0 times

...

Chanel

5 months ago

Okay, the key here is that clients on ALS1 are only receiving IPv4 addresses, but we need them to also get IPv6 addresses. The question is asking what action on DSW1 would allow this.

upvoted 0 times

...