Home Certifications Editorials

Exam overview and study plan

Professional Cloud Network Engineer Practice Questions

Professional Cloud Network Engineer

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 58 free questions

58 questions in this view

Page 1 of 10

Question 1

You are implementing a DNS architecture in Google Cloud. A central project contains a private zone named gcp.example.com that is managed by Cloud DNS. A separate production host project contains a Shared VPC, which provides the networking resources for a fleet of Compute Engine instances in service projects. You need to enable VMs in the service projects to resolve records from the private zone in the central project. What should you do?

Create a DNS peering configuration in the central project to peer the gcp.example.com zone with the Shared VPC network in the production host project.
Edit the gcp.example.com zone to add the Shared VPC network from the production host project to its list of authorized networks.
Create a DNS peering configuration in the service projects to peer the gcp.example.com zone to the central project.
Create a Cloud DNS inbound server policy in the central project. In the production host project, create an outbound server policy that forwards requests for gcp.example.com to the inbound policy's entry point IPs.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

You manage a critical application that relies on a Dedicated Interconnect connection between your on-premises data center and your Google Cloud VPC. Users are reporting intermittent slowness when accessing the application. You need to confirm the health and performance of the Dedicated Interconnect connection and identify any bottlenecks. What should you do?

Use VPC Flow Logs to analyze the traffic patterns between your on-premises network and the Google Cloud VPC.
Review Cloud Logging entries for the Dedicated Interconnect-related events to detect connection flaps.
Examine Cloud Monitoring metrics for the Dedicated Interconnect connection, focusing on ingress/egress bytes, packet loss, and latency.
Audit the BGP routing table on your Cloud Router to ensure all routes are being advertised on the dedicated link correctly.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

You are designing the network for a new Google Kubernetes Engine (GKE) cluster that will host a microservices application. This application requires a significant number of Pods, and each Pod needs its own unique IP address within the VPC network. You need to ensure that the cluster's Pods can communicate with other services within the same VPC network, and that you have sufficient IP address space for future growth without re-architecting the network. What should you do?

Create a routes-based GKE cluster and assign a large CIDR block to the cluster to ensure sufficient IP addressing for Pods.
Create a standard GKE cluster and configure an IP masquerade agent to translate Pod IP addresses to the node's IP.
Deploy a GKE cluster using non-RFC 1918 IP addresses for Pods and Services to avoid any potential IP conflicts with other VPC resources.
Create a VPC-native GKE cluster and configure it to use secondary IP ranges from the subnet for Pods and Services, ensuring the node's primary range remains separate.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Your organization uses Google Cloud's Network Connectivity Center. One of the VPC spokes contains subnet-corp-prod (10.10.1.0/24) and subnet-corp-test (192.168.1.0/24). You need to ensure that only the subnet-corp-prod range is advertised to the Network Connectivity Center hub, even if new subnets are created in the VPC. You want to use the most direct and precise method to control route advertisements from this spoke. What should you do?

Create a VPC firewall rule with a DENY action for the 192.168.1.0/24 range.
Set the include export ranges filter to 10.10.1.0/24 in the VPC Spoke configuration, and ensure no other ranges are included.
Create a custom static route in the Network Connectivity Center hub with the next hop as the VPC spoke for the 10.10.1.0/24 range.
Add 192.168.1.0/24 to the exclude export ranges filter in the VPC spoke configuration.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Your company has a single on-premises data center that needs to be connected to a VPC in Google Cloud. The total bandwidth requirement is 10Gbps. The connection must be redundant and have a minimum SLA of 99.9%. Due to the sensitive nature of the workloads, you need to implement the solution with the lowest latency. What should you do?

Create one HA VPN gateway. Create two tunnels-one tunnel for each of the two interfaces of the HA VPN gateway. Terminate each of the two tunnels on different public IPs addresses that are configured on the VPN termination device that is located on-premises.
Order a 10Gbps Partner Interconnect VLAN attachment. Create a Cloud Router in your Google Cloud VPC.
Create one HA VPN gateway. Create two tunnels-one tunnel for each of the two interfaces of the HA VPN gateway. Terminate each of the two tunnels on the single public IP address that is configured on the VPN termination device that is located on-premises.
Order two 10Gbps Dedicated Interconnect connections in a single metropolitan area (metro). Distribute the connections across different edge availability domains. Create a Cloud Router and two 10Gbps VLAN attachments.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Your organization has five different VPCs across different projects in your Google Cloud organization that need high-throughput connectivity. You have performed an audit of the IP address utilization in each VPC, and there are two overlapping subnets that are used by two of the VPCs: 240.0.0.0/16 and 240.128.0.0/24. You have confirmed that no Class E subnets (240.0.0.0/4) will require inter-VPC connectivity, but all other subnets in the VPCs will need connectivity. You need to deploy a Google Cloud routing solution to meet the connectivity requirements. What should you do?

Create a full mesh of VPC Network Peering connections between all five VPCs with an export exclude filter for 240.0.0.0/4 on every side. Add Cloud network firewall policy rules to allow traffic.
Create a Network Connectivity Center hub with a mesh topology. Add a VPC spoke for each of the five VPCs and configure an export exclude filter for 240.0.0.0/4 . Add Cloud network firewall policy rules to allow traffic.
Create a series of multiple network interface VMs with an interface in each VPC. Place the VMs in an instance group. Create an internal passthrough Network Load Balancer in each VPC with the backend of the instance group. Configure custom static routes in each VPC with the next hop of the respective load balancer. Add Cloud network firewall policy rules to allow traffic.
Create a full mesh of VPC Network Peering connections between all five VPCs. Make sure not to import or export subnet routes with public IP addresses. Add Cloud network firewall policy rules to allow traffic.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Page 1 of 10

Build confidence for exam day with expert-reviewed questions and realistic practice. Your next certification starts here.

Company

About Contact Our Authors FAQ

Trust and policies

Methodology Editorial policy Terms and conditions Privacy policy

Contact

ExamPrepare LLC5203 Juan Tabo Blvd STE 2BAlbuquerque, NM 87111[email protected]

© 2026 ExamPrepare LLC. All rights reserved. All certification names, exam codes and logos are the property of their respective owners. All associated trademark and copyright rights belong to those owners. ExamPrepare is not affiliated with, endorsed by, or sponsored by any certification vendor.