Sample Questions and Answers
How does Cloud Load Balancer handle sudden spikes in traffic?
A) It auto-scales backend instances based on demand
B) It drops excess traffic
C) It blocks new connections
D) It routes traffic to on-premises servers
Answer: A
Explanation: Cloud Load Balancer integrates with autoscaling to manage variable traffic loads efficiently.
Which Google Cloud product provides Dynamic Routing for VPN tunnels?
A) Cloud Router
B) Cloud NAT
C) Cloud DNS
D) Cloud Armor
Answer: A
Explanation: Cloud Router enables dynamic routing by exchanging routes between your on-premises network and Google Cloud using BGP.
What is the default priority value for firewall rules in Google Cloud?
A) 1000
B) 500
C) 0
D) 100
Answer: A
Explanation: The default priority for firewall rules is 1000, and lower values represent higher priority.
What does the “next hop” refer to in a Google Cloud route?
A) The destination to which traffic is forwarded next
B) The source IP of incoming packets
C) The firewall rule applied to traffic
D) The subnet mask of the route
Answer: A
Explanation: The next hop indicates the IP address or instance to which traffic matching the route is sent.
Which type of Google Cloud load balancer supports only internal traffic?
A) Internal TCP/UDP Load Balancer
B) External HTTP(S) Load Balancer
C) Network Load Balancer
D) SSL Proxy Load Balancer
Answer: A
Explanation: Internal TCP/UDP Load Balancer manages traffic inside a VPC network and is not exposed externally.
What happens when you delete a VPC network in Google Cloud?
A) All associated resources like VM instances and subnets are also deleted
B) Only subnets are deleted; VM instances remain running
C) Resources remain but lose connectivity
D) Nothing happens to resources; network only is removed
Answer: A
Explanation: Deleting a VPC network deletes all associated subnets and resources like VM instances connected to it.
How does Cloud NAT maintain high availability?
A) By automatically scaling and distributing NAT gateways
B) By assigning static external IPs only
C) By routing traffic through VPN tunnels
D) By blocking all inbound connections
Answer: A
Explanation: Cloud NAT scales automatically and distributes NAT gateways across zones to ensure high availability.
Which of the following is a benefit of using Private Google Access?
A) Allows VM instances without external IPs to reach Google APIs securely
B) Automatically assigns public IPs to instances
C) Enables VPN tunnels between regions
D) Routes all traffic through on-premises networks
Answer: A
Explanation: Private Google Access enables private instances to connect to Google APIs without requiring external IP addresses.
What is a VPC peering limitation in Google Cloud?
A) Peered VPCs cannot have overlapping IP ranges
B) Traffic between peered VPCs is billed at double rate
C) Peering works only within the same project
D) Firewalls are automatically disabled between peered networks
Answer: A
Explanation: VPC peering requires non-overlapping IP ranges to avoid routing conflicts.
What role does Cloud Router play in Interconnect?
A) It dynamically exchanges routes between on-premises and GCP networks
B) It encrypts traffic on Interconnect connections
C) It assigns external IP addresses for Interconnect
D) It monitors traffic latency
Answer: A
Explanation: Cloud Router handles dynamic BGP route exchanges for Interconnect connectivity.
What is the purpose of network tags in Google Cloud?
A) To apply firewall rules to specific VM instances
B) To assign IP addresses dynamically
C) To route traffic between VPCs
D) To monitor network performance
Answer: A
Explanation: Network tags allow you to associate firewall rules and routes with groups of VM instances.
Which of the following is TRUE about Cloud Armor?
A) It helps protect against application-layer DDoS attacks
B) It assigns external IPs to VMs
C) It manages DNS zones
D) It routes traffic within VPCs
Answer: A
Explanation: Cloud Armor provides DDoS and web application firewall protections at Layer 7.
What type of IP address does Cloud VPN require on the Google Cloud side?
A) Static external IP
B) Private internal IP
C) Ephemeral internal IP
D) Ephemeral external IP
Answer: A
Explanation: Cloud VPN requires a static external IP address for the VPN gateway to establish tunnels.
Which command-line tool can you use to test connectivity between VM instances in Google Cloud?
A) gcloud compute ssh with ping or traceroute
B) gsutil
C) kubectl
D) bq
Answer: A
Explanation: Using gcloud compute ssh, you can run networking commands like ping and traceroute for connectivity testing.
What is the recommended maximum number of IP addresses per subnet in Google Cloud?
A) /24 (256 IPs)
B) /16 (65,536 IPs)
C) /8 (16 million IPs)
D) /30 (4 IPs)
Answer: A
Explanation: /24 subnets are commonly recommended to avoid wasted IP addresses and simplify management.
Which Google Cloud service can be used to manage DNS failover and traffic routing based on health checks?
A) Cloud DNS with Traffic Director
B) Cloud NAT
C) Cloud VPN
D) Cloud Armor
Answer: A
Explanation: Cloud DNS integrated with Traffic Director can route traffic and manage failover based on backend health.
Which of these is a key benefit of using Cloud Interconnect over VPN?
A) Higher bandwidth and lower latency connection
B) Lower cost than VPN
C) Easier to configure than VPN
D) Uses public internet for traffic
Answer: A
Explanation: Cloud Interconnect provides a dedicated high-bandwidth, low-latency connection compared to VPN over the internet.
What is the function of a proxy-only network endpoint group (NEG)?
A) To configure load balancers to use backends managed by external proxy services
B) To allocate IP addresses to VM instances
C) To enforce firewall rules on VMs
D) To monitor network traffic
Answer: A
Explanation: Proxy-only NEGs allow integration with external proxy services as backend endpoints for load balancers.
What is the maximum BGP session hold time that can be configured on Cloud Router?
A) 180 seconds
B) 60 seconds
C) 600 seconds
D) 30 seconds
Answer: A
Explanation: Cloud Router supports hold times up to 180 seconds for BGP session timers.
Which Google Cloud product can you use to create private connections between VPCs across different organizations?
A) VPC Network Peering
B) Shared VPC
C) Cloud VPN
D) Cloud NAT
Answer: A
Explanation: VPC Network Peering allows private connectivity across different organizations’ VPCs.
What does Cloud DNS forwarding zones do?
A) Forward DNS queries to specific DNS servers for resolution
B) Block DNS queries from the internet
C) Provide external DNS resolution only
D) Manage IP addresses
Answer: A
Explanation: Forwarding zones send DNS queries to designated DNS servers, allowing private DNS resolution.
How can you secure access to Compute Engine instances by IP address?
A) Use firewall rules with source IP ranges
B) Enable Private Google Access
C) Configure Cloud Armor policies only
D) Use Cloud NAT exclusively
Answer: A
Explanation: Firewall rules can restrict access to instances based on source IP address ranges.
What is the default route priority assigned when creating a custom route in Google Cloud?
A) 1000
B) 500
C) 0
D) 100
Answer: A
Explanation: Custom routes inherit a default priority of 1000 unless specified otherwise.
Which Google Cloud product is primarily used for load balancing UDP traffic internally?
A) Internal TCP/UDP Load Balancer
B) Network Load Balancer
C) External HTTP(S) Load Balancer
D) SSL Proxy Load Balancer
Answer: A
Explanation: Internal TCP/UDP Load Balancer supports internal UDP and TCP traffic balancing.
Which Google Cloud service enables multi-region global load balancing with SSL termination?
A) External HTTP(S) Load Balancer
B) Network Load Balancer
C) Internal TCP/UDP Load Balancer
D) Cloud NAT
Answer: A
Explanation: External HTTP(S) Load Balancer supports global load balancing with SSL termination at the edge.
What is the maximum number of firewall rules per VPC network by default?
A) 1000
B) 500
C) 2000
D) 250
Answer: A
Explanation: Google Cloud allows up to 1000 firewall rules per VPC network by default.
What is the default behavior of egress traffic from a Google Cloud VM?
A) Allowed to go anywhere unless restricted by firewall rules
B) Denied unless explicitly allowed
C) Routed through Cloud NAT by default
D) Blocked for all private IPs
Answer: A
Explanation: By default, egress traffic is allowed from VMs unless firewall rules restrict it.
Which Google Cloud product allows policy enforcement on ingress traffic at the network edge?
A) Cloud Armor
B) Cloud Router
C) Cloud DNS
D) Cloud NAT
Answer: A
Explanation: Cloud Armor enforces security policies on incoming traffic to protect against attacks.
How can you connect a Google Kubernetes Engine (GKE) cluster to a private VPC network?
A) Enable VPC-native (alias IP) mode on the cluster
B) Use public IP addresses only
C) Configure a Cloud VPN tunnel
D) Use Shared VPC exclusively
Answer: A
Explanation: VPC-native GKE clusters use alias IPs to integrate directly with VPC networks privately.
Reviews
There are no reviews yet.