Question 1

Your organization recently re-architected your cloud environment to use Network Connectivity Center. However, an error occurred when you tried to add a new VPC named vpc-dev as a spoke. The error indicated that there was an issue with an existing spoke and the IP space of a VPC named vpc-pre-prod. You must complete the migration quickly and efficiently. What should you do?

Options :

A :

Remove the conflicting VPC spoke for vpc-pre-prod from the set of VPC spokes in Network Connectivity Center. Add the VPC spoke for vpc-dev. Add the previously removed vpc-pre-prod as a VPC spoke

B :

Delete the VMs associated with the conflicting subnets, then delete the conflicting subnets in vpc-dev. Recreate the subnets with a new IP range and redeploy the previously deleted VMs in the new subnets. Add the VPC spoke for vpc-dev.

C :

Exclude the conflicting IP range by using the --exclude-export-ranges flag when creating the VPC spoke for vpc-dev.

D :

Exclude the conflicting IP range by using the --exclude-export-ranges flag in the hub when attaching the VPC spoke for vpc-dev.

Answer: A

Question 2

Your company's logo is published as an image file across multiple websites that are hosted by your company You have implemented Cloud CDN, however, you want to improve the performance of the cache hit ratio associated with this image file. What should you do?

Options :

A :

Configure custom cache keys for the backend service that holds the image file, and clear the Host and Protocol checkboxes

B :

Configure Cloud Storage as a custom origin backend to host the image file, and select multi-region as the location type

C : Configure versioned IJRLs for each domain to serve users the •mage file before the cache entry expires

D : Configure the default time to live (TTL) as O for the image file.

Answer: A

Question 3

Your on-premises data center has 2 routers connected to your Google Cloud environment through a VPN on

each router. All applications are working correctly; however, all of the traffic is passing across a single VPN

instead of being load-balanced across the 2 connections as desired.

During troubleshooting you find:

• Each on-premises router is configured with a unique ASN.

• Each on-premises router is configured with the same routes and priorities.

Both on-premises routers are configured with a VPN connected to a single Cloud Router.

• BGP sessions are established between both on-premises routers and the Cloud Router.

• Only 1 of the on-premises router’s routes are being added to the routing table.

What is the most likely cause of this problem?

Options :

A : The on-premises routers are configured with the same routes.

B : A firewall is blocking the traffic across the second VPN connection.

C : You do not have a load balancer to load-balance the network traffic.

D : The ASNs being used on the on-premises routers are different.

Answer: D

Question 4

You need to give each member of your network operations team least-privilege access to create, modify, and

delete Cloud Interconnect VLAN attachments.

What should you do?

Options :

A : Assign each user the editor role.

B : Assign each user the compute.networkAdmin role.

C :

Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get.

D :

Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get, compute.routers.create, compute.routers.get, compute.routers.update.

Answer: D

Question 5

Your company runs an enterprise platform on-premises using virtual machines (VMS). Your internet customers have created tens of thousands of DNS domains panting to your public IP addresses allocated to the Vtvls Typically, your customers hard-code your IP addresses In their DNS records You are now planning to migrate the platform to Compute Engine and you want to use Bring your Own IP you want to minimize disruption to the Platform What Should you d0?

Options :

A :

Create a VPC and request static external IP addresses from Google Cloud Assagn the IP addresses to the Compute Engine instances. Notify your customers of the new IP addresses so they can update their DNS

B :

Verify ownership of your IP addresses. After the verification, Google Cloud advertises and provisions the IP prefix for you_ Assign the IP addresses to the Compute Engine Instances

C :

Create a VPC With the same IP address range as your on-premises network Asson the IP addresses to the Compute Engine Instances.

D :

Verify ownership of your IP addresses. Use live migration to import the prefix Assign the IP addresses to Compute Engine instances.

Answer: D