Google Professional-Cloud-Network-Engineer Actual Free Exam Questions & Community Discussion

Exam Code/Number: Professional-Cloud-Network-Engineer
Exam Name/Title: Google Cloud Certified - Professional Cloud Network Engineer
Certification Provider: Google
Corresponding Certification: Google Cloud Platform

Exam Questions: 236
Updated On: May 30, 2026

Question #37

You are increasing your usage of Cloud VPN between on-premises and GCP, and you want to support more traffic than a single tunnel can handle. You want to increase the available bandwidth using Cloud VPN.
What should you do?

A. Create two VPN tunnels on the same Cloud VPN gateway that point to the same destination VPN gateway IP address.

B. Add a second Cloud VPN gateway in a different region than the existing VPN gateway. Create a new tunnel on the second Cloud VPN gateway that forwards the same IP range, but points to the existing on- premises VPN gateway IP address.

C. Add a second on-premises VPN gateway with a different public IP address. Create a second tunnel on the existing Cloud VPN gateway that forwards the same IP range, but points at the new on-premises gateway IP.

D. Double the MTU on your on-premises VPN gateway from 1460 bytes to 2920 bytes.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #38

You have enabled HTTP(S) load balancing for your application, and your application developers have reported that HTTP(S) requests are not being distributed correctly to your Compute Engine Virtual Machine instances. You want to find data about how the request are being distributed.
Which two methods can accomplish this? (Choose two.)

A. In Stackdriver Monitoring, select Resources > Metrics Explorer and search for https
/request_bytes_count metric.

B. On the Load Balancer details page of the GCP Console, click on the Monitoring tab, select your backend service, and look at the graphs.

C. In Stackdriver Monitoring, create a new dashboard and track the https/backend_request_count metric for the load balancer.

D. In Stackdriver Monitoring, select Resources > Google Cloud Load Balancers and review the Key Metrics graphs in the dashboard.

E. In Stackdriver Error Reporting, look for any unacknowledged errors for the Cloud Load Balancers service.

Discussion 0

Correct Answer: B,C Vote an answer

Question #39

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a traffic-scrubbing service and want to restrict your origin to allow connections only from the traffic-scrubbing service.
What should you do?

A. Create a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service.

B. Create IPTables firewall rules that block all traffic except for the traffic-scrubbing service.

C. Create a VPC Firewall rule that blocks all traffic except for the traffic-scrubbing service.

D. Create a VPC Service Control Perimeter that blocks all traffic except for the traffic-scrubbing service.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #40

Question:
You are configuring the firewall endpoints as part of the Cloud Next Generation Firewall (Cloud NGFW) intrusion prevention service in Google Cloud. You have configured a threat prevention security profile, and you now need to create an endpoint for traffic inspection. What should you do?

A. Create a Private Service Connect endpoint within the zone, associate the endpoint to the VPC network, and use a firewall policy rule to apply the L7 inspection.

B. Create a firewall endpoint within the zone, associate the endpoint to the VPC network, and use a firewall policy rule to apply the L7 inspection.

C. Create a firewall endpoint within the region, associate the endpoint to the VPC network, and use a firewall policy rule to apply the L7 inspection.

D. Attach the profile to the VPC network, create a firewall endpoint within the zone, and use a firewall policy rule to apply the L7 inspection.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #41

Your company uses Compute Engine instances that are exposed to the public internet. Each compute instance has a single network interface with a single public IP address. You need to block any connection attempt that originates from internet clients with IP addresses that belong to the bgp_asn_toblock BGP ASN. What should you do?

A. Q Create a new Cloud Armor network edge security policy, and use the -network-src-asns parameter.

B. Q Create a new Cloud Armor backend security policy, and use the -network-src-asns parameter.

C. Q Create a new Cloud Armor edge security policy, and use the -network-src-asns parameter.

D. O Create a new firewall policy ingress rule, and use the -network-src-asns parameter.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #42

You need to give each member of your network operations team least-privilege access to create, modify, and delete Cloud Interconnect VLAN attachments.
What should you do?

A. Assign each user the editor role.

B. Give each user the following permissions only: compute.interconnectAttachments.create, compute.
interconnectAttachments.get, compute.routers.create, compute.routers.get, compute.routers.update.

C. Assign each user the compute.networkAdmin role.

D. Give each user the following permissions only: compute.interconnectAttachments.create, compute.
interconnectAttachments.get.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #43

Question:
Your organization is deploying a mission-critical application with components in different regions due to strict compliance requirements. There are latency issues between different applications that reside in us- central1 and us-east4. The application team suspects the Google Cloud network as the source of the excessive latency despite using the Premium Network Service Tier. You need to use Google-recommended practices with the least amount of effort to verify the inter-region latency by investigating network performance. What should you do?

A. Set up the Performance Dashboard in Network Intelligence Center. Select the traffic type (cross-zonal), the metric (latency - RTT), the time period, the desired regions (us-central1 and us-east4), and the network tier.

B. Configure a VM with a probe in Network Intelligence Center in each zone for each region. Choose the traffic type (cross-zonal), metric (latency - RTT), desired regions (us-central1 and us-east4), and the network tier.

C. Configure two Linux VMs in each zone for each region. Install the application, and run a load test using each zone from different regions.

D. Enable VPC Flow Logs for the VPC. Identify major bottlenecks from the application level using Flow Analyzer.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #44

You need to centralize the Identity and Access Management permissions and email distribution for the WebServices Team as efficiently as possible.
What should you do?

A. Create a new Cloud Identity Domain for the WebServices Team.

B. Create a Google Group for the WebServices Team.

C. Create a G Suite Domain for the WebServices Team.

D. Create a new Custom Role for all members of the WebServices Team.

Discussion 0

Correct Answer: B Vote an answer

Question #45

You have a web application that is currently hosted in the us-central1 region. Users experience high latency when traveling in Asia. You've configured a network load balancer, but users have not experienced a performance improvement. You want to decrease the latency.
What should you do?

A. Configure the TTL for the DNS zone to decrease the time between updates.

B. Configure a policy-based route rule to prioritize the traffic.

C. Configure an HTTP load balancer, and direct the traffic to it.

D. Configure Dynamic Routing for the subnet hosting the application.

Discussion 0

Correct Answer: C Vote an answer

Download Free Google Professional-Cloud-Network-Engineer Demo

Simply submit your e-mail address below to get started with our free demo of your Google Professional-Cloud-Network-Engineer exam.