VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Google Cloud Professional Cloud Network Engineer Free Sample Questions

Description

Covers designing and implementing VPC networks and routing, load balancing, Cloud CDN, and Cloud DNS, hybrid connectivity with Cloud Interconnect, and network security policies.

12 free sample questions153 in the full practice test Other version: PCNE(308)

Try simulator

GCP-PCNE Sample Questions

  1. Question 1

    Intermediate

    Designing and Planning a Google Cloud VPC Network · Designing a resilient and performant hybrid and multi-cloud network

    You are the Lead Network Architect for a global retail company. You are designing a network architecture for a new e-commerce platform that requires 99.99% availability for hybrid connectivity between your on-premises data center and Google Cloud. The application is sensitive to latency and requires high bandwidth (approx 20 Gbps). You need to select the connectivity solution that meets the SLA and bandwidth requirements while minimizing latency. Which architecture should you choose?

    Answer and explanation

    Correct answer: C

    To achieve the 99.99% SLA for Dedicated Interconnect, Google Cloud requires four connections: two in one metropolitan area (in different edge availability domains) and two in a second metropolitan area (in different edge availability domains). This ensures resilience against both single-device failures and entire metro-level failures. A single metro setup only provides a 99.9% SLA.

  2. Question 2

    Advanced

    Designing and Planning a Google Cloud VPC Network · Designing for GKE

    A multinational corporation is deploying a Shared VPC topology. They have a host project containing the Shared VPC and multiple service projects for different departments (HR, Finance, Engineering). The Engineering department needs to deploy a Google Kubernetes Engine (GKE) cluster in their service project using the shared network. Which specific IAM roles must be granted to the GKE service account in the host project to allow the GKE cluster to manage networking resources correctly?

    Answer and explanation

    Correct answer: D

    For a GKE cluster in a service project to use a Shared VPC, the GKE service account (service-[PROJECT_NUMBER]@container-engine-robot.iam.gserviceaccount.com) from the service project needs the 'Kubernetes Engine Host Service Agent User' role on the host project. Additionally, the 'Compute Network User' role is typically required for the Google APIs service agent to manage network resources like firewalls and routes.

  3. Question 3

    Intermediate

    Designing and Planning a Google Cloud VPC Network · Designing for GKE

    You are designing a VPC network for a large organization that plans to use Google Kubernetes Engine (GKE) extensively. You anticipate having 50 nodes per cluster and up to 100 pods per node. You want to ensure efficient IP address utilization and avoid exhaustion. Which VPC design choice is most critical for this requirement?

    Answer and explanation

    Correct answer: B

    VPC-native clusters (using Alias IPs) are the recommended best practice. They allow you to allocate separate, larger secondary CIDR ranges specifically for pods and services, preventing the consumption of the primary subnet IP addresses (which are used for nodes) and allowing for much greater scalability.

  4. Question 4

    Intermediate

    Designing and Planning a Google Cloud VPC Network · Designing a resilient and performant hybrid and multi-cloud network

    You are consulting for a company that needs to connect their on-premises network to Google Cloud. They require private access to Google APIs (like Cloud Storage and BigQuery) from their on-premises hosts without assigning public IP addresses to the on-prem hosts. They have an existing Cloud VPN connection. Which configuration should you implement?

    Answer and explanation

    Correct answer: B

    Private Google Access for on-premises hosts requires two main steps: 1) Advertising the restricted.googleapis.com (199.36.153.4/30) or private.googleapis.com (199.36.153.8/30) VIPs over the Cloud VPN to on-prem via Cloud Router custom advertisements. 2) Configuring on-premises DNS to resolve Google API domains (CNAME) to these specific VIPs. Simply enabling PGA on the subnet only helps VM instances in that subnet, not on-prem hosts.

  5. Question 5

    Beginner

    Designing and Planning a Google Cloud VPC Network · Designing VPC networks

    You are designing a multi-region VPC network. You want to ensure that if a regional failure occurs, traffic can be automatically rerouted to a standby region via your Cloud VPN connections. You are using Cloud Router for dynamic routing. What routing mode must you select for the VPC network to support this failover scenario?

    Answer and explanation

    Correct answer: C

    Global dynamic routing allows Cloud Routers to advertise subnets from all regions to on-premises peers and learn routes from on-premises peers available to all regions. This is essential for multi-region failover, as it allows the network to be aware of alternative paths through different regions.

  6. Question 6

    Intermediate

    Designing and Planning a Google Cloud VPC Network · Designing a resilient and performant hybrid and multi-cloud network

    Your organization requires a secure connection between Google Cloud and AWS. You need to establish a high-bandwidth, low-latency connection without traversing the public internet. The solution must support SLA commitments. Which Google Cloud service should you design into your architecture?

    Answer and explanation

    Correct answer: C

    Cross-Cloud Interconnect is a managed service specifically designed to connect Google Cloud to other cloud providers like AWS, Azure, and Oracle Cloud. It provides high bandwidth (10Gbps or 100Gbps), an SLA, and does not use the public internet, meeting all the requirements.

Register free for 6 more questions

Or unlock all 153 GCP-PCNE questions with explanations, timed mode and flashcards.

Related practice tests

All Google practice exams