GOOGLE PROFFESSIONAL CLOUD NETWORK
ENGINEER QUESTIONS AND ANSWERS | VERIFIED
AND WELL DETAILED ANSWERS | PLUS RATIONALES
| GUARANTEED PASS | LATEST EXAM UPDATE |
EXAM PREP | STUDY GUIDE | PRACTICE TEST
Domain 1: Designing, Planning, and Prototyping a Network (Questions 1–20)
**1. A company needs to connect its on-premises data center to GCP with a dedicated, private connection that
bypasses the public internet. Which service should they use?**
- A) Cloud VPN
,- B) Cloud Interconnect (Dedicated)
- C) VPC Peering
- D) Cloud NAT
**Answer: B**
**Rationale:** Dedicated Interconnect provides a private, dedicated physical connection between on-premises
and GCP, bypassing the public internet. Cloud VPN uses the public internet (encrypted), VPC Peering connects
VPCs within GCP, and Cloud NAT provides outbound internet for private instances.
**2. Which GCP VPC feature allows you to control the flow of traffic between subnets using rules based on IP
ranges, protocols, and ports?**
- A) Firewall rules
- B) Routes
- C) VPC Peering
- D) Shared VPC
**Answer: A**
**Rationale:** Firewall rules control ingress/egress traffic based on IP ranges, protocols, and ports. Routes
determine path selection, VPC Peering connects networks, and Shared VPC shares subnets across projects.
**3. A company wants to use a single VPC across multiple projects. Which feature should they implement?**
,- A) VPC Peering
- B) Shared VPC
- C) Cloud VPN
- D) Multi-NIC
**Answer: B**
**Rationale:** Shared VPC allows a host project's VPC network to be shared with service projects, centralizing
network administration while allowing independent resource management.
**4. Which of the following is a global resource in GCP?**
- A) Subnet
- B) Firewall rule
- C) VPC network
- D) Instance
**Answer: C**
**Rationale:** VPC networks are global resources in GCP. Subnets are regional, firewall rules are global (but
applied to instances), and instances are zonal.
**5. What is the primary purpose of a Cloud Router?**
, - A) To route traffic between VPCs
- B) To exchange routes dynamically between a VPC and on-premises using BGP
- C) To provide NAT for private instances
- D) To act as a firewall
**Answer: B**
**Rationale:** Cloud Router uses BGP to dynamically exchange routes between a VPC and on-premises
networks (via VPN or Interconnect).
**6. A company needs to establish a connection to GCP that provides SLA-backed uptime but does not require a
physical dedicated connection. Which should they choose?**
- A) Dedicated Interconnect
- B) Partner Interconnect
- C) Classic VPN
- D) HA VPN
**Answer: B**
**Rationale:** Partner Interconnect provides connectivity through a supported service provider, offering an SLA
without requiring a direct physical connection to a Google PoP.
**7. Which GCP load balancer operates at Layer 4 (TCP/UDP) and supports regional backends?**
ENGINEER QUESTIONS AND ANSWERS | VERIFIED
AND WELL DETAILED ANSWERS | PLUS RATIONALES
| GUARANTEED PASS | LATEST EXAM UPDATE |
EXAM PREP | STUDY GUIDE | PRACTICE TEST
Domain 1: Designing, Planning, and Prototyping a Network (Questions 1–20)
**1. A company needs to connect its on-premises data center to GCP with a dedicated, private connection that
bypasses the public internet. Which service should they use?**
- A) Cloud VPN
,- B) Cloud Interconnect (Dedicated)
- C) VPC Peering
- D) Cloud NAT
**Answer: B**
**Rationale:** Dedicated Interconnect provides a private, dedicated physical connection between on-premises
and GCP, bypassing the public internet. Cloud VPN uses the public internet (encrypted), VPC Peering connects
VPCs within GCP, and Cloud NAT provides outbound internet for private instances.
**2. Which GCP VPC feature allows you to control the flow of traffic between subnets using rules based on IP
ranges, protocols, and ports?**
- A) Firewall rules
- B) Routes
- C) VPC Peering
- D) Shared VPC
**Answer: A**
**Rationale:** Firewall rules control ingress/egress traffic based on IP ranges, protocols, and ports. Routes
determine path selection, VPC Peering connects networks, and Shared VPC shares subnets across projects.
**3. A company wants to use a single VPC across multiple projects. Which feature should they implement?**
,- A) VPC Peering
- B) Shared VPC
- C) Cloud VPN
- D) Multi-NIC
**Answer: B**
**Rationale:** Shared VPC allows a host project's VPC network to be shared with service projects, centralizing
network administration while allowing independent resource management.
**4. Which of the following is a global resource in GCP?**
- A) Subnet
- B) Firewall rule
- C) VPC network
- D) Instance
**Answer: C**
**Rationale:** VPC networks are global resources in GCP. Subnets are regional, firewall rules are global (but
applied to instances), and instances are zonal.
**5. What is the primary purpose of a Cloud Router?**
, - A) To route traffic between VPCs
- B) To exchange routes dynamically between a VPC and on-premises using BGP
- C) To provide NAT for private instances
- D) To act as a firewall
**Answer: B**
**Rationale:** Cloud Router uses BGP to dynamically exchange routes between a VPC and on-premises
networks (via VPN or Interconnect).
**6. A company needs to establish a connection to GCP that provides SLA-backed uptime but does not require a
physical dedicated connection. Which should they choose?**
- A) Dedicated Interconnect
- B) Partner Interconnect
- C) Classic VPN
- D) HA VPN
**Answer: B**
**Rationale:** Partner Interconnect provides connectivity through a supported service provider, offering an SLA
without requiring a direct physical connection to a Google PoP.
**7. Which GCP load balancer operates at Layer 4 (TCP/UDP) and supports regional backends?**
