Free Preparation Discussions
MENU
Google Professional Cloud Network Engineer Exam Questions
Free Google Professional Cloud Network Engineer Exam Actual Questions
Note: Premium Questions for Professional Cloud Network Engineer were last updated On Jun. 02, 2026 (see below)
Your organization has an on-premises data center. You need to provide connectivity from the on-premises data center to Google Cloud. Bandwidth must be at least 1 Gbps, and the traffic must not traverse the internet. What should you do?
For private connectivity with at least 1 Gbps bandwidth and without using the public internet, Partner Interconnect is the suitable choice if you do not require the 10 Gbps minimum of Dedicated Interconnect. With Partner Interconnect, you create a VLAN attachment and work with a service provider that facilitates the connection between your on-premises network and Google Cloud. This solution supports connections as low as 50 Mbps and up to 10 Gbps.
Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You believe you have identified a potential malicious actor, but aren't certain you have the correct client IP address. You want to identify this actor while minimizing disruption to your legitimate users.
What should you do?
https://cloud.google.com/armor/docs/security-policy-concepts#preview_mode
You are designing a packet mirroring policy as pan of your network security architecture for your gaming workload. Your Infrastructure is located in the us-west2 region and deployed across several zones: us-west2-a. us-west2-b. and us-west2-c The Infrastructure Is running a web-based application on TCP ports 80 and 443 with other game servers that utilize the UDP protocol. You need to deploy packet mirroring policies and collector instances to monitor web application traffic while minimizing inter-zonal network egress costs.
Following Google-recommended practices, how should you deploy the packet mirroring policies and collector instances?
Create Packet Mirroring Policies:
You need to create three packet mirroring policies, one for each zone (us-west2-a, us-west2-b, and us-west2-c). This ensures that each zone's traffic is mirrored appropriately without unnecessary cross-zone traffic.
Create Collector Instances:
Set up one group of collector instances for the us-west2 region. Having a single group of collector instances for the entire region minimizes the number of instances required and simplifies the management while keeping egress costs low since the collectors are within the same region.
Configuration of Policies:
Each packet mirroring policy should be configured to match traffic for its specific zone. Use instance-tags to identify and match the relevant instances within each zone. This helps in correctly capturing the traffic from the appropriate sources.
Filter for TCP Traffic:
Create a filter for TCP traffic (ports 80 and 443). This step ensures that only the relevant web application traffic is mirrored, reducing the amount of data processed and improving efficiency.
Cost Efficiency:
By having packet mirroring policies specific to each zone and a regional collector group, you reduce inter-zonal network egress costs. The data remains within the same region, avoiding extra charges associated with cross-zone traffic.
References:
Google Cloud Packet Mirroring Documentation
Best Practices for Packet Mirroring
Cost Management in Google Cloud
This solution aligns with Google-recommended practices by ensuring efficient traffic capture, minimal inter-zonal costs, and streamlined management of the packet mirroring setup.
Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You believe you have identified a potential malicious actor, but aren't certain you have the correct client IP address. You want to identify this actor while minimizing disruption to your legitimate users.
What should you do?
https://cloud.google.com/armor/docs/security-policy-concepts#preview_mode
You need to configure a Google Kubernetes Engine (GKE) cluster. The initial deployment should have 5 nodes with the potential to scale to 10 nodes. The maximum number of Pods per node is 8. The number of services could grow from 100 to up to 1024. How should you design the IP schema to optimally meet this requirement?
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Crystal Mitchell
17 days agoNathan Miller
26 days agoFrank Allen
1 month agoBrian Roberts
1 month agoMonica Hernandez
1 month agoAmy Lee
1 month agoKevin Hernandez
27 days agoSarah Morgan
22 days agoRozella
2 months agoShawn
2 months agoLili
3 months agoVi
3 months agoHildegarde
3 months agoNoe
3 months agoJames
4 months agoErinn
4 months agoEzekiel
4 months agoCarissa
4 months agoVelda
5 months agoBettina
5 months agoGladys
5 months agoLeoma
5 months agoOtis
6 months agoJanessa
6 months agoMary
6 months agoReid
6 months agoHerminia
7 months agoKina
7 months agoTesha
7 months agoLorean
7 months agoWava
8 months agoTimothy
8 months agoCecilia
8 months agoCaren
8 months agoTheron
9 months agoCorrie
9 months agoBenedict
9 months agoDannie
11 months agoWerner
12 months agoAnastacia
1 year agoGregoria
1 year agoNieves
1 year agoLisbeth
1 year agoMarta
1 year agoStacey
1 year agoValentine
1 year agoJunita
1 year agoKati
2 years agoAvery
2 years agoGail
2 years agoAleta
2 years agoJenelle
2 years agoJenise
2 years agoMaddie
2 years agoBernardo
2 years agoEmily
2 years agoMona
2 years agoMayra
2 years agoCorazon
2 years agoAdrianna
2 years agoRemona
2 years agoShalon
2 years agoAleisha
2 years agoLera
2 years agoAngelica
2 years agoVeronica
2 years agoJestine
2 years agoLorean
2 years agoQuentin
2 years agoLisha
2 years ago