Google Cloud Certified Network Design and Security 1 — Questions and Answers
Question 1: A company wants to connect its on-premises data center to Google Cloud with a dedicated, private connection. Which service should they use?
- Cloud VPN
- Cloud Interconnect (Correct answer)
- Cloud Router
- Shared VPC
Correct answer: Cloud Interconnect
Cloud Interconnect provides a dedicated, high-bandwidth connection between on-premises infrastructure and Google Cloud.
Question 2: Which Google Cloud feature allows you to share a VPC network across multiple projects within the same organization?
- VPC Peering
- Cloud Interconnect
- Shared VPC (Correct answer)
- Cloud NAT
Correct answer: Shared VPC
Shared VPC lets an organization connect resources from multiple projects to a common VPC network, enabling centralized network administration.
Question 3: A team needs to allow GCE instances without external IPs to access the internet for software updates. What is the recommended approach?
- Assign public IPs to all instances
- Use Cloud VPN
- Configure Cloud NAT (Correct answer)
- Set up a bastion host
Correct answer: Configure Cloud NAT
Cloud NAT allows VM instances without external IP addresses to initiate outbound connections to the internet.
Question 4: Which GCP product provides a fully managed, distributed denial-of-service (DDoS) defense and WAF service?
- Cloud Armor (Correct answer)
- Cloud IAP
- VPC Firewall Rules
- Security Command Center
Correct answer: Cloud Armor
Google Cloud Armor provides DDoS protection and web application firewall (WAF) policies for GCP applications.
Question 5: You need two VPC networks in the same project to communicate privately without routing through the public internet. What should you use?
- Cloud Interconnect
- VPC Network Peering (Correct answer)
- Shared VPC
- Cloud VPN
Correct answer: VPC Network Peering
VPC Network Peering allows private connectivity between VPC networks in the same or different projects without using external IPs.
Question 6: Which firewall rule direction handles traffic coming INTO a VM instance from outside?
- Egress
- Ingress (Correct answer)
- Bidirectional
- NAT
Correct answer: Ingress
Ingress firewall rules control inbound traffic arriving at VM instances from external sources.
Google Cloud Certified Network Design and Security 1
A company wants to connect its on-premises data center to Google Cloud with a dedicated, private connection.
Which service should they use?