Google Cloud Certified Network Design and Security 3

Question 1

What is the function of Cloud Router in Google Cloud?

Accepted Answer

Dynamically exchanges routes between VPC and on-premises networks using BGP

Answer

Routes DNS queries

Answer

Monitors network traffic

Answer

Manages firewall rules

Question 2

A company wants to restrict all internet egress from its GCP VPC except through an approved proxy. What is the best architecture?

Accepted Answer

Deploy a Squid proxy on a GCE instance with restrictive egress firewall rules

Answer

Use Cloud Armor to block egress

Answer

Enable VPC Flow Logs

Answer

Use Cloud NAT without external IPs

Question 3

Which GCP feature provides network traffic analysis by capturing metadata about IP flows into and out of VMs?

Accepted Answer

VPC Flow Logs

Answer

Cloud Armor logs

Answer

Cloud Trace

Answer

Firewall Insights

Question 4

A GCP architect needs to give on-premises users low-latency access to a Cloud Storage bucket without traversing the internet. What should they use?

Accepted Answer

Direct Peering or Cloud Interconnect with Private Google Access for on-premises

Answer

Cloud CDN

Answer

Cloud VPN only

Answer

Cloud DNS

Question 5

What is the maximum number of VPC networks you can create per project by default in Google Cloud?

Accepted Answer

10

Answer

5

Answer

25

Answer

15

Question 6

Which Google Cloud service lets you centrally manage and enforce security policies across all projects in an organization?

Accepted Answer

Organizational Policy Service

Answer

Cloud IAM

Answer

VPC Service Controls

Answer

Cloud Armor