Google Cloud Certified Network Design and Security 3

Question 1

What is the function of Cloud Router in Google Cloud?

Accepted Answer

Dynamically exchanges routes between VPC and on-premises networks using BGP

Answer

Cloud Router uses Border Gateway Protocol (BGP) to dynamically advertise and learn routes between Google Cloud and on-premises networks.

Question 2

A company wants to restrict all internet egress from its GCP VPC except through an approved proxy. What is the best architecture?

Accepted Answer

Deploy a Squid proxy on a GCE instance with restrictive egress firewall rules

Answer

Deploying a managed proxy (like Squid) with firewall rules that force all egress through it gives centralized control over outbound internet traffic.

Question 3

Which GCP feature provides network traffic analysis by capturing metadata about IP flows into and out of VMs?

Accepted Answer

VPC Flow Logs

Answer

VPC Flow Logs capture metadata (source, destination, ports, bytes) for network flows in your VPC for monitoring and security analysis.

Question 4

A GCP architect needs to give on-premises users low-latency access to a Cloud Storage bucket without traversing the internet. What should they use?

Accepted Answer

Direct Peering or Cloud Interconnect with Private Google Access for on-premises

Answer

Cloud Interconnect combined with Private Google Access for on-premises enables low-latency, private access to Google services like Cloud Storage.

Question 5

What is the maximum number of VPC networks you can create per project by default in Google Cloud?

Accepted Answer

10

Answer

By default, each GCP project can have up to 10 VPC networks, though this quota can be increased by request.

Google Cloud Certified - Professional Cloud Architect Practice Test