Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Network Engineer Exam - Topic 2 Question 39 Discussion

In order to provide subnet level isolation, you want to force instance-A in one subnet to route through a security appliance, called instance-B, in another subnet.What should you do?
B) Create a more specific route than the system-generated subnet route, pointing the next hop to instance-B with a tag applied to instance-A.
A) Create a more specific route than the system-generated subnet route, pointing the next hop to instance-B with no tag.
C) Delete the system-generated subnet route and create a specific route to instance-B with a tag applied to instance-A.
D) Move instance-B to another VPC and, using multi-NIC, connect instance-B's interface to instance-A's network. Configure the appropriate routes to force traffic through to instance-A.

Google Professional Cloud Network Engineer Exam - Topic 2 Question 39 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam
Question #: 39
Topic #: 2
[All Professional Cloud Network Engineer Questions]

In order to provide subnet level isolation, you want to force instance-A in one subnet to route through a security appliance, called instance-B, in another subnet.

What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Melodie at May 06, 2022, 03:19 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Alfreda
9 months ago
Wait, moving instance-B to another VPC? That’s a bit much, right?
upvoted 0 times
...
Royce
9 months ago
D seems overly complicated for this scenario.
upvoted 0 times
...
Ilda
9 months ago
C sounds risky, deleting system routes can cause issues.
upvoted 0 times
...
Ruthann
9 months ago
I think B could work too, tagging might help with routing.
upvoted 0 times
...
Rebbecca
9 months ago
A is the way to go, more specific routes are key!
upvoted 0 times
...
Patti
10 months ago
Moving instance-B to another VPC seems like overkill for just routing traffic. I think I’d lean towards option B, but I’m not entirely confident about the tagging part.
upvoted 0 times
...
Leonardo
10 months ago
I feel like deleting the system-generated route might cause issues. I think I should create a more specific route instead, but I'm torn between A and C.
upvoted 0 times
...
Yoko
10 months ago
I remember we discussed routing and how specific routes can override default ones, but I'm not sure if I need a tag or not.
upvoted 0 times
...
Lai
10 months ago
This question feels similar to one we practiced about routing through a firewall. I think option A might be the right choice, but I can't recall the tagging details.
upvoted 0 times
...
Eun
10 months ago
I'm pretty sure cellular usage would be under the Monitoring section, since that's where you'd expect to find device-level metrics and statistics.
upvoted 0 times
...
Charisse
10 months ago
Hmm, I'm a bit confused on this one. I know it has something to do with testing controls, but I'm not sure if controlled reprocessing or input validation would also be considered valid answers.
upvoted 0 times
...
Emelda
10 months ago
Okay, let's see. The key here is understanding how the mv command works on the same filesystem.
upvoted 0 times
...
Chanel
10 months ago
Okay, the key here is that clients on ALS1 are only receiving IPv4 addresses, but we need them to also get IPv6 addresses. The question is asking what action on DSW1 would allow this.
upvoted 0 times
...

Save Cancel