Cloud Engineer Networking & Connectivity Flashcards

What is the main difference between a regional and a global external HTTP(S) load balancer?

Answer: Global LB uses Anycast IPs and routes to the nearest backend; regional LB is confined to one region

The global HTTP(S) LB uses Anycast to route users to the closest healthy backend worldwide, while the regional version serves traffic within a single region.

Which VPC firewall rule component is used to apply the rule only to specific VM instances?

Answer: Target tags or target service accounts

Target tags (or target service accounts) on a firewall rule ensure it applies only to VM instances that carry the matching network tag or service account.

Your organization uses Shared VPC. Where must the Shared VPC host project's subnets be configured?

Answer: In the host project, then shared to service projects

In a Shared VPC setup, subnets are created and managed in the host project and then shared with one or more service projects, centralizing network administration.

What Cloud Armor policy type protects against common web attacks like SQL injection and cross-site scripting?

Answer: WAF (Web Application Firewall) preconfigured rules

Cloud Armor includes preconfigured WAF rules based on OWASP ModSecurity Core Rule Set to block common web exploits like SQLi and XSS.

Which networking mode allows a GCP VM to receive packets destined for IP addresses other than its own (used for NAT VMs or VPN gateways)?

Answer: IP forwarding

Enabling IP forwarding on a VM instance allows it to route and forward packets whose destination IP does not match the VM's own IP address.

What is the purpose of a Cloud Router in Google Cloud networking?

Answer: Dynamically exchange routing information with on-premises networks via BGP

Cloud Router uses BGP (Border Gateway Protocol) to dynamically advertise and learn routes between your VPC and on-premises networks connected via VPN or Interconnect.