← Back to exam page

Professional-Cloud-Network-Engineer – Professional Cloud Network Engineer

Loading demo links...

Showing 7–9 of 10 questions

Question 7

Your company has a security team that manages firewalls and SSL certificates. It also has a networking team that manages the networking resources. The networking team needs to be able to read firewall rules, but should not be able to create, modify, or delete them.

How should you set up permissions for the networking team?

Select an option, then click Submit answer.

  • ○

    Assign members of the networking team the compute.networkUser role.
  • ○

    Assign members of the networking team the compute.networkAdmin role.
  • ○

    Assign members of the networking team a custom role with only the compute.networks.* and the compute.firewalls.list permissions.
  • ○

    Assign members of the networking team the compute.networkViewer role, and add the compute.networks.use permission.
Question 8

One instance in your VPC is configured to run with a private IP address only. You want to ensure that even if this instance is deleted, its current private IP address will not be automatically assigned to a different instance.

In the GCP Console, what should you do?

Select an option, then click Submit answer.

  • ○

    Assign a public IP address to the instance.
  • ○

    Assign a new reserved internal IP address to the instance.
  • ○

    Change the instance’s current internal IP address to static.
  • ○

    Add custom metadata to the instance with key internal-address and value reserved.
Question 9

You have created an HTTP(S) load balanced service. You need to verify that your backend instances are responding properly.

How should you configure the health check?

Select an option, then click Submit answer.

  • ○

    Set request-path to a specific URL used for health checking, and set proxy-header to PROXY_V1.
  • ○

    Set request-path to a specific URL used for health checking, and set host to include a custom host header that identifies the health check.
  • ○

    Set request-path to a specific URL used for health checking, and set response to a string that the backend service will always return in the response body.
  • ○

    Set proxy-header to the default value, and set host to include a custom host header that identifies the health check.