Google Professional-Cloud-Network-Engineer valid study dumps : Google Cloud Certified - Professional Cloud Network Engineer

You recently deployed your application in Google Cloud. You need to verify your Google Cloud network configuration before deploying your on-premises workloads. You want to confirm that your Google Cloud network configuration allows traffic to flow from your cloud resources to your on-premises network. This validation should also analyze and diagnose potential failure points in your Google Cloud network configurations without sending any data plane test traffic. What should you do?

• A. Enable Packet Mirroring on your application and send test traffic.
• B. Enable VPC Flow Logs and send test traffic.
• C. Use Network Intelligence Center's Network Topology visualizations.
• D. Use Network Intelligence Center's Connectivity Tests.

A lead engineer wrote a custom tool that deploys virtual machines in the legacy data center. He wants to migrate the custom tool to the new cloud environment. You want to advocate for the adoption of Google Cloud Deployment Manager. What are two business risks of migrating to Cloud Deployment Manager? Choose 2 answers

• A. Cloud Deployment Manager uses Python.
• B. Cloud Deployment Manager is unfamiliar to the company's engineers.
• C. Cloud Deployment Manager requires a Google APIs service account to run.
• D. Cloud Deployment Manager only supports automation of Google Cloud resources.
• E. Cloud Deployment Manager APIs could be deprecated in the future.
• F. Cloud Deployment Manager can be used to permanently delete cloud resources.

You are creating a design that will connect your single on-premises data center to a VPC in Google Cloud by using an IPsec VPN connection. The connection must have a minimum SLA of
99.99%. There is a single VPN termination device located in your on-premises data center. The VPN termination device can be configured only with a single public IP address. Your design must also have the least amount of setup effort. What should you do?

• A. 1. Create two HA VPN gateways.
  2. Create one tunnel on interface 0 of one gateway and create one tunnel on interface 1 of the other gateway.
  3. Terminate each of the two tunnels on the single public IP address that is configured on the VPN termination device located in your on-premises data center.
• B. 1. Create one HA VPN gateway.
  2. Create one tunnel for each of the two HA VPN gateway interfaces.
  3. Terminate each of the two tunnels on the single public IP address that is configured on the VPN termination device located in your on-premises data center.
• C. 1. Create one Classic VPN gateway and one HA VPN gateway.
  2. Create one tunnel on the interface of the Classic VPN gateway and one tunnel on interface 1 of the HA VPN gateway.
  3. Terminate each of the two tunnels on the single public IP address that is configured on the VPN termination device located in your on-premises data center.
• D. 1. Replace the existing on-premises VPN termination device with a new device that is configured with two different public IP addresses.
  2. Create one HA VPN gateway.
  3. Create one tunnel for each of the two HA VPN gateway interfaces.
  4. Terminate each of the two tunnels on one of the two public IP addresses that is configured on the new VPN termination device located in your on-premises data center.

You are deploying a global external TCP load balancing solution and want to preserve the source IP address of the original layer 3 payload.
Which type of load balancer should you use?

• A. Internal load balancer
• B. Network load balancer
• C. TCP/SSL proxy load balancer
• D. HTTP(S) load balancer

You are designing the networking infrastructure for your company on Google Cloud. Your design must connect three separate VPC networks for development, testing, and production to two on- premises data centers while remaining isolated from each other. Each data center is connected to Google Cloud via Cloud VPN.
Additionally, your design must incorporate a user-published security service that is hosted in another Google Cloud organization and made available for private consumption. You need to create a scalable and centrally managed solution.
What should you do?

• A. Create a Network Connectivity Center hub, and configure each of the three VPCs and the two Cloud VPN spokes. Use Private Service Connect to access the third-party service.
• B. Use Network Connectivity Center to establish a full-mesh topology between the three VPCs. Use VPC Network Peering to connect to the Cloud VPN and Private Service Connect to access the third-party service.
• C. Use VPC Network Peering to create a full mesh between the development, testing, and production VPCs and the Cloud VPN network.
• D. Create a Shared VPC, and migrate the resources from the development, testing, and production VPCs into service projects.