Google Cloud Certified Network Design and Security

Question 1

A company wants to connect its on-premises data center to Google Cloud with a dedicated, private connection. Which service should they use?

Accepted Answer

Cloud Interconnect

Answer

Cloud VPN

Answer

Cloud Router

Answer

Shared VPC

Question 2

Which Google Cloud feature allows you to share a VPC network across multiple projects within the same organization?

Accepted Answer

Shared VPC

Answer

VPC Peering

Answer

Cloud Interconnect

Answer

Cloud NAT

Question 3

A team needs to allow GCE instances without external IPs to access the internet for software updates. What is the recommended approach?

Accepted Answer

Configure Cloud NAT

Answer

Assign public IPs to all instances

Answer

Use Cloud VPN

Answer

Set up a bastion host

Question 4

Which GCP product provides a fully managed, distributed denial-of-service (DDoS) defense and WAF service?

Accepted Answer

Cloud Armor

Answer

Cloud IAP

Answer

VPC Firewall Rules

Answer

Security Command Center

Question 5

You need two VPC networks in the same project to communicate privately without routing through the public internet. What should you use?

Accepted Answer

VPC Network Peering

Answer

Cloud Interconnect

Answer

Shared VPC

Answer

Cloud VPN

Question 6

Which firewall rule direction handles traffic coming INTO a VM instance from outside?

Accepted Answer

Ingress

Answer

Egress

Answer

Bidirectional

Answer

NAT