🔍

PCNE — questions

Page 5 of 13 · 255 total questions.

PCNE Question 81

Single page →
Topic 1 · Question 81

Your company's security team tends to use managed services when possible. You need to build a dashboard to show the number of deny hits that occur against configured firewall rules without increasing operational overhead. What should you do?

  • AConfigure Firewall Rules Logging. Use Firewall Insights to display the number of hits. (correct answer)
  • BConfigure Firewall Rules Logging. View the logs in Cloud Logging, and create a custom dashboard in Cloud Monitoring to display the number of hits.
  • CConfigure a firewall appliance from the Google Cloud Marketplace. Route all traffic through this appliance, and apply the firewall rules at this layer. Use the firewall appliance to display the number of hits.
  • DConfigure Packet Mirroring on the VPC. Apply a filter with an IP address list of the Denied Firewall rules. Configure an intrusion detection system (IDS) appliance as the receiver to display the number of hits.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure Firewall Rules Logging. Use Firewall Insights to display the number of hits.

PCNE Question 82

Single page →
Topic 1 · Question 82

You are configuring your Google Cloud environment to connect to your on-premises network. Your configuration must be able to reach Cloud Storage APIs and your Google Kubernetes Engine nodes across your private Cloud Interconnect network. You have already configured a Cloud Router with your Interconnect VLAN attachments. You now need to set up the appropriate router advertisement configuration on the Cloud Router. What should you do?

  • AConfigure the route advertisement to the default setting.
  • BOn the on-premises router, configure a static route for the storage API virtual IP address which points to the Cloud Router's link-local IP address.
  • CConfigure the route advertisement to the custom setting, and manually add prefix 199.36.153.8/30 to the list of advertisements. Leave all other options as their default settings.
  • DConfigure the route advertisement to the custom setting, and manually add prefix 199.36.153.8/30 to the list of advertisements. Advertise all visible subnets to the Cloud Router. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure the route advertisement to the custom setting, and manually add prefix 199.36.153.8/30 to the list of advertisements. Advertise all visible subnets to the Cloud Router.

PCNE Question 83

Single page →
Topic 1 · Question 83

You are configuring load balancing for a standard three-tier (web, application, and database) application. You have configured an external HTTP(S) load balancer for the web servers. You need to configure load balancing for the application tier of servers. What should you do?

  • AConfigure a forwarding rule on the existing load balancer for the application tier.
  • BConfigure equal cost multi-path routing on the application servers.
  • CConfigure a new internal HTTP(S) load balancer for the application tier. (correct answer)
  • DConfigure a URL map on the existing load balancer to route traffic to the application tier.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure a new internal HTTP(S) load balancer for the application tier.

Explanation

A load balancer distributes traffic across healthy backends in multiple zones for availability and scale.

PCNE Question 84

Single page →
Topic 1 · Question 84

Your organization has a new security policy that requires you to monitor all egress traffic payloads from your virtual machines in region us-west2. You deployed an intrusion detection system (IDS) virtual appliance in the same region to meet the new policy. You now need to integrate the IDS into the environment to monitor all egress traffic payloads from us-west2. What should you do?

  • AEnable firewall logging, and forward all filtered egress firewall logs to the IDS.
  • BEnable VPC Flow Logs. Create a sink in Cloud Logging to send filtered egress VPC Flow Logs to the IDS.
  • CCreate an internal TCP/UDP load balancer for Packet Mirroring, and add a packet mirroring policy filter for egress traffic. (correct answer)
  • DCreate an internal HTTP(S) load balancer for Packet Mirroring, and add a packet mirroring policy filter for egress traffic.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an internal TCP/UDP load balancer for Packet Mirroring, and add a packet mirroring policy filter for egress traffic.

Explanation

A load balancer distributes traffic across healthy backends in multiple zones for availability and scale.

PCNE Question 85

Single page →
Topic 1 · Question 85

You are developing an HTTP API hosted on a Compute Engine virtual machine instance that must be invoked only by multiple clients within the same Virtual Private Cloud (VPC). You want clients to be able to get the IP address of the service. What should you do?

  • AReserve a static external IP address and assign it to an HTTP(S) load balancing service's forwarding rule. Clients should use this IP address to connect to the service.
  • BEnsure that clients use Compute Engine internal DNS by connecting to the instance name with the url https://[INSTANCE_NAME].[ZONE].c.[PROJECT_ID].internal/. (correct answer)
  • CReserve a static external IP address and assign it to an HTTP(S) load balancing service's forwarding rule. Then, define an A record in Cloud DNS. Clients should use the name of the A record to connect to the service.
  • DEnsure that clients use Compute Engine internal DNS by connecting to the instance name with the url https://[API_NAME]/[API_VERSION]/.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Ensure that clients use Compute Engine internal DNS by connecting to the instance name with the url https://[INSTANCE_NAME].[ZONE].c.[PROJECT_ID].internal/.

Explanation

Compute Engine provides configurable virtual machines when you need full control of the OS.

PCNE Question 86

Single page →
Topic 1 · Question 86

You recently deployed Cloud VPN to connect your on-premises data canter to Google Cloud. You need to monitor the usage of this VPN and set up alerts in case traffic exceeds the maximum allowed. You need to be able to quickly decide whether to add extra links or move to a Dedicated Interconnect. What should you do?

  • AIn the Network Intelligence Canter, check for the number of packet drops on the VPN.
  • BIn the Google Cloud Console, use Monitoring Query Language to create a custom alert for bandwidth utilization. (correct answer)
  • CIn the Monitoring section of the Google Cloud Console, use the Dashboard section to select a default dashboard for VPN usage.
  • DIn the VPN section of the Google Cloud Console, select the VPN under hybrid connectivity, and then select monitoring to display utilization on the dashboard.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: In the Google Cloud Console, use Monitoring Query Language to create a custom alert for bandwidth utilization.

PCNE Question 87

Single page →
Topic 1 · Question 87

You have applications running in the us-west1 and us-east1 regions. You want to build a highly available VPN that provides 99.99% availability to connect your applications from your project to the cloud services provided by your partner's project while minimizing the amount of infrastructure required. Your partner's services are also in the us-west1 and us-east1 regions. You want to implement the simplest solution. What should you do?

  • ACreate one Cloud Router and one HA VPN gateway in each region of your VPC and your partner's VPC. Connect your VPN gateways to the partner's gateways. Enable global dynamic routing in each VPC.
  • BCreate one Cloud Router and one HA VPN gateway in the us-west1 region of your VPC. Create one OpenVPN Access Server in each region of your partner's VPC. Connect your VPN gateway to your partner's servers.
  • CCreate one OpenVPN Access Server in each region of your VPC and your partner's VPConnect your servers to the partner's servers.
  • DCreate one Cloud Router and one HA VPN gateway in the us-west1 region of your VPC and your partner's VPC. Connect your VPN gateways to the partner's gateways with a pair of tunnels. Enable global dynamic routing in each VPC. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create one Cloud Router and one HA VPN gateway in the us-west1 region of your VPC and your partner's VPC. Connect your VPN gateways to the partner's gateways with a pair of tunnels. Enable global dynamic routing in ea...

Explanation

A VPC provides a global, software-defined private network for your Google Cloud resources. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

PCNE Question 88

Single page →
Topic 1 · Question 88

You need to create the network infrastructure to deploy a highly available web application in the us-east1 and us-west1 regions. The application runs on Compute Engine instances, and it does not require the use of a database. You want to follow Google-recommended practices. What should you do?

  • ACreate one VPC with one subnet in each region.Create a regional network load balancer in each region with a static IP address.Enable Cloud CDN on the load balancers.Create an A record in Cloud DNS with both IP addresses for the load balancers.
  • BCreate one VPC with one subnet in each region.Create a global load balancer with a static IP address.Enable Cloud CDN and Google Cloud Armor on the load balancer.Create an A record using the IP address of the load balancer in Cloud DNS. (correct answer)
  • CCreate one VPC in each region, and peer both VPCs.Create a global load balancer.Enable Cloud CDN on the load balancer.Create a CNAME for the load balancer in Cloud DNS.
  • DCreate one VPC with one subnet in each region.Create an HTTP(S) load balancer with a static IP address.Choose the standard tier for the network.Enable Cloud CDN on the load balancer.Create a CNAME record using the load balancer’s IP address in Cloud DNS.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create one VPC with one subnet in each region.Create a global load balancer with a static IP address.Enable Cloud CDN and Google Cloud Armor on the load balancer.Create an A record using the IP address of the load bal...

Explanation

Cloud CDN caches content at Google edge locations to reduce latency and offload origins. A load balancer distributes traffic across healthy backends in multiple zones for availability and scale. Cloud DNS provides scalable, authoritative DNS with health checks and routing policies. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

PCNE Question 89

Single page →
Topic 1 · Question 89

You are the network administrator responsible for hybrid connectivity at your organization. Your developer team wants to use Cloud SQL in the us-west1 region in your Shared VPC. You configured a Dedicated Interconnect connection and a Cloud Router in us-west1, and the connectivity between your Shared VPC and on-premises data center is working as expected. You just created the private services access connection required for Cloud SQL using the reserved IP address range and default settings. However, your developers cannot access the Cloud SQL instance from on-premises. You want to resolve the issue. What should you do?

  • A1. Modify the VPC Network Peering connection used for Cloud SQL, and enable the import and export of routes.2. Create a custom route advertisement in your Cloud Router to advertise the Cloud SQL IP address range. (correct answer)
  • B1. Change the VPC routing mode to global.2. Create a custom route advertisement in your Cloud Router to advertise the Cloud SQL IP address range.
  • C1. Create an additional Cloud Router in us-west2.2. Create a new Border Gateway Protocol (BGP) peering connection to your on-premises data center.3. Modify the VPC Network Peering connection used for Cloud SQL, and enable the import and export of routes.
  • D1. Change the VPC routing mode to global.2. Modify the VPC Network Peering connection used for Cloud SQL, and enable the import and export of routes.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: 1. Modify the VPC Network Peering connection used for Cloud SQL, and enable the import and export of routes.2. Create a custom route advertisement in your Cloud Router to advertise the Cloud SQL IP address range.

Explanation

Cloud SQL is a managed relational database (MySQL/PostgreSQL/SQL Server) that handles patching, backups, and failover. A VPC provides a global, software-defined private network for your Google Cloud resources.

PCNE Question 90

Single page →
Topic 1 · Question 90

Your company has separate Virtual Private Cloud (VPC) networks in a single region for two departments: Sales and Finance. The Sales department's VPC network already has connectivity to on-premises locations using HA VPN, and you have confirmed that the subnet ranges do not overlap. You plan to peer both VPC networks to use the same HA tunnels for on-premises connectivity, while providing internet connectivity for the Google Cloud workloads through Cloud NAT. Internet access from the on-premises locations should not flow through Google Cloud. You need to propagate all routes between the Finance department and on-premises locations. What should you do?

  • APeer the two VPCs, and use the default configuration for the Cloud Routers.
  • BPeer the two VPCs, and use Cloud Router’s custom route advertisements to announce the peered VPC network ranges to the on-premises locations.
  • CPeer the two VPCs. Configure VPC Network Peering to export custom routes from Sales and import custom routes on Finance's VPC network. Use Cloud Router’s custom route advertisements to announce a default route to the on-premises locations.
  • DPeer the two VPCs. Configure VPC Network Peering to export custom routes from Sales and import custom routes on Finance's VPC network. Use Cloud Router’s custom route advertisements to announce the peered VPC network ranges to the on-premises locations. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Peer the two VPCs. Configure VPC Network Peering to export custom routes from Sales and import custom routes on Finance's VPC network. Use Cloud Router’s custom route advertisements to announce the peered VPC network...

Explanation

A VPC provides a global, software-defined private network for your Google Cloud resources.

PCNE Question 91

Single page →
Topic 1 · Question 91

You recently noticed a recurring daily spike in network usage in your Google Cloud project. You need to identify the virtual machine (VM) instances and type of traffic causing the spike in traffic utilization while minimizing the cost and management overhead required. What should you do?

  • AEnable VPC Flow Logs and send the output to BigQuery for analysis. (correct answer)
  • BEnable Firewall Rules Logging for all allowed traffic and send the output to BigQuery for analysis.
  • CConfigure Packet Mirroring to send all traffic to a VM. Use Wireshark on the VM to identity traffic utilization for each VM in the VPC.
  • DDeploy a third-party network appliance and configure it as the default gateway. Use the third-party network appliance to identify users with high network traffic.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Enable VPC Flow Logs and send the output to BigQuery for analysis.

Explanation

BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage. A VPC provides a global, software-defined private network for your Google Cloud resources. This option decouples the components so they scale independently and absorb load spikes.

PCNE Question 92

Single page →
Topic 1 · Question 92

You need to enable Private Google Access for use by some subnets within your Virtual Private Cloud (VPC). Your security team set up the VPC to send all internet-bound traffic back to the on- premises data center for inspection before egressing to the internet, and is also implementing VPC Service Controls in the environment for API-level security control. You have already enabled the subnets for Private Google Access. What configuration changes should you make to enable Private Google Access while adhering to your security team’s requirements?

  • A1. Create a private DNS zone with a CNAME record for *.googleapis.com to restricted.googleapis.com, with an A record pointing to Google's restricted API address range.2. Create a custom route that points Google's restricted API address range to the default internet gateway as the next hop. (correct answer)
  • B1. Create a private DNS zone with a CNAME record for *.googleapis.com to restricted.googleapis.com, with an A record pointing to Google's restricted API address range.2. Change the custom route that points the default route (0/0) to the default internet gateway as the next hop.
  • C1. Create a private DNS zone with a CNAME record for *.googleapis.com to private.googleapis.com, with an A record painting to Google's private AP address range.2. Change the custom route that points the default route (0/0) to the default internet gateway as the next hop.
  • D1. Create a private DNS zone with a CNAME record for *.googleapis.com to private.googleapis.com, with an A record pointing to Google's private API address range.2. Create a custom route that points Google's private API address range to the default internet gateway as the next hop.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: 1. Create a private DNS zone with a CNAME record for *.googleapis.com to restricted.googleapis.com, with an A record pointing to Google's restricted API address range.2. Create a custom route that points Google's rest...

PCNE Question 93

Single page →
Topic 1 · Question 93

You have deployed an HTTP(s) load balancer, but health checks to port 80 on the Compute Engine virtual machine instance are failing, and no traffic is sent to your instances. You want to resolve the problem. Which commands should you run?

  • Agcloud compute instances add-access-config instance-1
  • Bgcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --destination-ranges 130.211.0.0/22,35.191.0.0/16 --direction EGRESS
  • Cgcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS (correct answer)
  • Dgcloud compute health-checks update http health-check --unhealthy-threshold 10
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS.

PCNE Question 94

Single page →
Topic 1 · Question 94

You deployed a hub-and-spoke architecture in your Google Cloud environment that uses VPC Network Peering to connect the spokes to the hub. For security reasons, you deployed a private Google Kubernetes Engine (GKE) cluster in one of the spoke projects with a private endpoint for the control plane. You configured authorized networks to be the subnet range where the GKE nodes are deployed. When you attempt to reach the GKE control plane from a different spoke project, you cannot access it. You need to allow access to the GKE control plane from the other spoke projects. What should you do?

  • AAdd a firewall rule that allows port 443 from the other spoke projects.
  • BEnable Private Google Access on the subnet where the GKE nodes are deployed.
  • CConfigure the authorized networks to be the subnet ranges of the other spoke projects.
  • DDeploy a proxy in the spoke project where the GKE nodes are deployed and connect to the control plane through the proxy. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Deploy a proxy in the spoke project where the GKE nodes are deployed and connect to the control plane through the proxy.

Explanation

Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads.

PCNE Question 95

Single page →
Topic 1 · Question 95

You recently deployed your application in Google Cloud. You need to verify your Google Cloud network configuration before deploying your on-premises workloads. You want to confirm that your Google Cloud network configuration allows traffic to flow from your cloud resources to your on- premises network. This validation should also analyze and diagnose potential failure points in your Google Cloud network configurations without sending any data plane test traffic. What should you do?

  • AUse Network Intelligence Center's Connectivity Tests. (correct answer)
  • BEnable Packet Mirroring on your application and send test traffic.
  • CUse Network Intelligence Center's Network Topology visualizations.
  • DEnable VPC Flow Logs and send test traffic.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use Network Intelligence Center's Connectivity Tests.

PCNE Question 96

Single page →
Topic 1 · Question 96

In your Google Cloud organization, you have two folders: Dev and Prod. You want a scalable and consistent way to enforce the following firewall rules for all virtual machines (VMs) with minimal cost: • Port 8080 should always be open for VMs in the projects in the Dev folder. • Any traffic to port 8080 should be denied for all VMs in your projects in the Prod folder. What should you do?

  • ACreate and associate a firewall policy with the Dev folder with a rule to open port 8080. Create and associate a firewall policy with the Prod folder with a rule to deny traffic to port 8080. (correct answer)
  • BCreate a Shared VPC for the Dev projects and a Shared VPC for the Prod projects. Create a VPC firewall rule to open port 8080 in the Shared VPC for Dev. Create a firewall rule to deny traffic to port 8080 in the Shared VPC for Prod. Deploy VMs to those Shared VPCs.
  • CIn all VPCs for the Dev projects, create a VPC firewall rule to open port 8080. In all VPCs for the Prod projects, create a VPC firewall rule to deny traffic to port 8080.
  • DUse Anthos Config Connector to enforce a security policy to open port 8080 on the Dev VMs and deny traffic to port 8080 on the Prod VMs.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create and associate a firewall policy with the Dev folder with a rule to open port 8080. Create and associate a firewall policy with the Prod folder with a rule to deny traffic to port 8080.

PCNE Question 98

Single page →
Topic 1 · Question 98

Your company’s on-premises network is connected to a VPC using a Cloud VPN tunnel. You have a static route of 0.0.0.0/0 with the VPN tunnel as its next hop defined in the VPC. All internet bound traffic currently passes through the on-premises network. You configured Cloud NAT to translate the primary IP addresses of Compute Engine instances in one region. Traffic from those instances will now reach the internet directly from their VPC and not from the on-premises network. Traffic from the virtual machines (VMs) is not translating addresses as expected. What should you do?

  • ALower the TCP Established Connection Idle Timeout for the NAT gateway.
  • BAdd firewall rules that allow ingress and egress of the external NAT IP address, have a target tag that is on the Compute Engine instances, and have a priority value higher than the priority value of the default route to the VPN gateway.
  • CAdd a default static route to the VPC with the default internet gateway as the next hop, the network tag associated with the Compute Engine instances, and a higher priority than the priority of the default route to the VPN tunnel. (correct answer)
  • DIncrease the default min-ports-per-vm setting for the Cloud NAT gateway.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Add a default static route to the VPC with the default internet gateway as the next hop, the network tag associated with the Compute Engine instances, and a higher priority than the priority of the default route to th...

Explanation

Compute Engine provides configurable virtual machines when you need full control of the OS. A VPC provides a global, software-defined private network for your Google Cloud resources.

PCNE Question 99

Single page →
Topic 1 · Question 99

You are designing a Partner Interconnect hybrid cloud connectivity solution with geo-redundancy across two metropolitan areas. You want to follow Google-recommended practices to set up the following region/metro pairs: • (region 1/metro 1) • (region 2/metro 2) What should you do?

  • ACreate a Cloud Router in region 1 with two VLAN attachments connected to metro1-zone1-x.Create a Cloud Router in region 2 with two VLAN attachments connected to metro1-zone2-x.
  • BCreate a Cloud Router in region 1 with one VLAN attachment connected to metro1-zone1-x.Create a Cloud Router in region 2 with two VLAN attachments connected to metro2-zone2-x.
  • CCreate a Cloud Router in region 1 with one VLAN attachment connected to metro1-zone2-x.Create a Cloud Router in region 2 with one VLAN attachment connected to metro2-zone2-x.
  • DCreate a Cloud Router in region 1 with one VLAN attachment connected to metro1-zone1-x and one VLAN attachment connected to metro1-zone2-x.Create a Cloud Router in region 2 with one VLAN attachment connected to metro2-zone1-x and one VLAN attachment to metro2-zone2-x. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a Cloud Router in region 1 with one VLAN attachment connected to metro1-zone1-x and one VLAN attachment connected to metro1-zone2-x.Create a Cloud Router in region 2 with one VLAN attachment connected to metro2...

PCNE Question 100

Single page →
Topic 1 · Question 100

You are designing the network architecture for your organization. Your organization has three developer teams: Web, App, and Database. All of the developer teams require access to Compute Engine instances to perform their critical tasks. You are part of a small network and security team that needs to provide network access to the developers. You need to maintain centralized control over network resources, including subnets, routes, and firewalls. You want to minimize operational overhead. How should you design this topology?

  • AConfigure a host project with a Shared VPC. Create service projects for Web, App, and Database. (correct answer)
  • BConfigure one VPC for Web, one VPC for App, and one VPC for Database. Configure HA VPN between each VPC.
  • CConfigure three Shared VPC host projects, each with a service project: one for Web, one for App, and one for Database.
  • DConfigure one VPC for Web, one VPC for App, and one VPC for Database. Use VPC Network Peering to connect all VPCs in a full mesh.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure a host project with a Shared VPC. Create service projects for Web, App, and Database.

Explanation

Shared VPC centralizes network administration by sharing one VPC across multiple projects. A VPC provides a global, software-defined private network for your Google Cloud resources.

PCNE Question 101

Single page →
Topic 1 · Question 101

Your company has 10 separate Virtual Private Cloud (VPC) networks, with one VPC per project in a single region in Google Cloud. Your security team requires each VPC network to have private connectivity to the main on-premises location via a Partner Interconnect connection in the same region. To optimize cost and operations, the same connectivity must be shared with all projects. You must ensure that all traffic between different projects, on-premises locations, and the internet can be inspected using the same third-party appliances. What should you do?

  • AConfigure the third-party appliances with multiple interfaces and specific Partner Interconnect VLAN attachments per project. Create the relevant routes on the third-party appliances and VPC networks.
  • BConfigure the third-party appliances with multiple interfaces, with each interface connected to a separate VPC network. Create separate VPC networks for on-premises and internet connectivity. Create the relevant routes on the third-party appliances and VPC networks.
  • CConsolidate all existing projects’ subnetworks into a single VPCreate separate VPC networks for on-premises and internet connectivity. Configure the third-party appliances with multiple interfaces, with each interface connected to a separate VPC network. Create the relevant routes on the third-party appliances and VPC networks.
  • DConfigure the third-party appliances with multiple interfaces. Create a hub VPC network for all projects, and create separate VPC networks for on-premises and internet connectivity. Create the relevant routes on the third-party appliances and VPC networks. Use VPC Network Peering to connect all projects’ VPC networks to the hub VPC. Export custom routes from the hub VPC and import on all projects’ VPC networks. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure the third-party appliances with multiple interfaces. Create a hub VPC network for all projects, and create separate VPC networks for on-premises and internet connectivity. Create the relevant routes on the t...

Explanation

A VPC provides a global, software-defined private network for your Google Cloud resources.

Showing questions 81–100 of 255 · Page 5 of 13