Google Cloud Certified Network Design and Security

Question 1

A company wants to connect its on-premises data center to Google Cloud with a dedicated, private connection. Which service should they use?

Accepted Answer

Cloud Interconnect

Answer

Cloud Interconnect provides a dedicated, high-bandwidth connection between on-premises infrastructure and Google Cloud.

Question 2

Which Google Cloud feature allows you to share a VPC network across multiple projects within the same organization?

Accepted Answer

Shared VPC

Answer

Shared VPC lets an organization connect resources from multiple projects to a common VPC network, enabling centralized network administration.

Question 3

A team needs to allow GCE instances without external IPs to access the internet for software updates. What is the recommended approach?

Accepted Answer

Configure Cloud NAT

Answer

Cloud NAT allows VM instances without external IP addresses to initiate outbound connections to the internet.

Question 4

Which GCP product provides a fully managed, distributed denial-of-service (DDoS) defense and WAF service?

Accepted Answer

Cloud Armor

Answer

Google Cloud Armor provides DDoS protection and web application firewall (WAF) policies for GCP applications.

Question 5

You need two VPC networks in the same project to communicate privately without routing through the public internet. What should you use?

Accepted Answer

VPC Network Peering

Answer

VPC Network Peering allows private connectivity between VPC networks in the same or different projects without using external IPs.

Google Cloud Certified - Professional Cloud Architect Practice Test