PCNE Implementing Hybrid Interconnectivity Practice Test 2 — 15 Questions

Question 1

A company wants to connect their on-premises network to Google Cloud with a Dedicated Interconnect. They have ordered a circuit from a telecom provider and need to complete the setup. Which of the following steps is required during the provisioning process?

Accepted Answer

Create a VLAN attachment in the Google Cloud Console.. When provisioning a Dedicated Interconnect, after the telecom provider has delivered the circuit to the meet-me room, you must create a VLAN attachment (formerly called a VLAN attachment or interconnect attachment) in the Google Cloud Console. This attachment defines the VLAN and the Cloud Router that will establish BGP peering with your on-premises router, making it the essential step to complete the Layer 2 and Layer 3 connectivity.

Answer

Set up a VPN tunnel for redundancy.

Answer

Configure on-premises DNS forwarding to Cloud DNS.

Answer

Configure the Cloud Router BGP session before ordering the circuit.

Question 2

A network engineer needs to test connectivity after setting up a Dedicated Interconnect VLAN attachment and BGP session. Which tool should they use to verify that Google Cloud can reach an on-premises IP address?

Accepted Answer

ping and traceroute from a Google Cloud VM to the on-premises IP.. The standard tools to test connectivity are ping (ICMP echo) and traceroute (path discovery). They are used after BGP is established to verify end-to-end reachability.

Answer

gcloud compute interconnect list command.

Answer

Cloud Monitoring dashboard for interconnect metrics.

Answer

tcpdump on the on-premises router.

Question 3

A company uses Partner Interconnect with a service provider that offers Layer 2 connectivity. The engineer needs to establish BGP peering between the on-premises router and Cloud Router. What must be created in Google Cloud to enable this?

Accepted Answer

A VLAN attachment of type PARTNER_PROVIDER.. With Layer 2 Partner Interconnect, the service provider extends a VLAN to Google. You create a VLAN attachment of type PARTNER_PROVIDER, which allows you to configure the Cloud Router and BGP session.

Answer

An HA VPN gateway.

Answer

A Dedicated Interconnect attachment.

Answer

A VLAN attachment of type PARTNER.

Question 4

A company is setting up HA VPN between GCP and an on-premises network. They need to configure two VPN tunnels for high availability. Which of the following is required for the HA VPN gateway?

Accepted Answer

Two external IP addresses, one for each interface.. An HA VPN gateway has two interfaces, each with its own external IP address. This allows two tunnels to be established for redundancy.

Answer

A single external IP address shared by both interfaces.

Answer

A Cloud Router with BGP enabled on both tunnels.

Answer

A dedicated interconnect circuit.

Question 5

A network engineer is troubleshooting a failing HA VPN tunnel. They need to view VPN gateway logs to identify the issue. Which Google Cloud service should they use to access the logs?

Accepted Answer

Cloud Logging. Cloud Logging captures logs from Cloud VPN gateways, including tunnel events, IKE negotiations, and error messages.

Answer

Cloud Audit Logs

Answer

Cloud Debugger

Answer

Cloud Monitoring

Question 6

A company wants to use HA VPN with route-based VPN. Which VPN configuration option must be enabled?

Accepted Answer

Route-based VPN by selecting Dynamic Routing (BGP) or using static routes.. Route-based VPN uses routing (BGP or static routes) to determine which traffic goes through the tunnel, as opposed to policy-based which uses security policies.

Answer

IKEv1 with pre-shared keys.

Answer

Using certificates instead of pre-shared keys.

Answer

Policy-based VPN with multiple policies for each subnet.

Question 7

A company has two Dedicated Interconnect connections from different metro areas to Google Cloud. They want to achieve a 99.99% SLA. What is the minimum requirement?

Accepted Answer

Two Dedicated Interconnect connections from different metro areas, configured for redundancy.. To meet the 99.99% SLA, you need at least two connections that are diverse (different metro areas) and configured in active-active or active-passive mode. This ensures redundancy if one fails.

Answer

One Dedicated Interconnect connection with two VLAN attachments.

Answer

One Dedicated Interconnect and one Partner Interconnect.

Answer

Two Dedicated Interconnect connections in the same metro area.

Question 8

An engineer needs to monitor the operational status of a Dedicated Interconnect link. Which Cloud Monitoring metric should they use?

Accepted Answer

interconnect/link/operational_status. The metric interconnect/link/operational_status reflects if the link is up or down, exactly what is needed to monitor the link status.

Answer

interconnect/attachment/operational_status

Answer

interconnect/network/sent_bytes_count

Answer

interconnect/network/received_bytes_count

Question 9

A company wants to use BGP AS path prepending to influence traffic from Google Cloud to their on-premises network. They have two Dedicated Interconnect connections. Where should they configure the AS path prepending?

Accepted Answer

On the on-premises router by adding extra AS numbers to the AS path.. AS path prepending is configured on the on-premises router when advertising routes to Google Cloud. The router adds extra AS numbers to make a path less preferred.

Answer

On the Cloud Router BGP session.

Answer

In the VLAN attachment configuration.

Answer

In the Cloud Router as a route policy with set as-path prepend.

Question 10

A company needs to resolve on-premises DNS names from Google Cloud VMs. They want to forward DNS queries for a specific domain (example.corp) to an on-premises DNS server. Which Cloud DNS feature should they use?

Accepted Answer

Outbound DNS forwarding (conditional forwarding). Outbound DNS forwarding with conditional forwarding allows Cloud DNS to forward queries for a specific domain (example.corp) to an on-premises DNS server. This is the correct feature because it selectively routes DNS traffic based on the domain name, enabling resolution of private on-premises names from Google Cloud VMs without exposing the entire VPC network.

Answer

Private DNS zones

Answer

DNS peering

Answer

Inbound DNS policy

Question 11

A company wants to allow on-premises DNS servers to resolve Google Cloud private VM names. They need to configure a Google-managed forwarding server IP. Which Cloud DNS feature should they use?

Accepted Answer

Inbound DNS policy. Inbound DNS policy creates a forwarding zone and provides a Google-managed inbound server IP that on-premises servers can use to resolve GCP private DNS names.

Answer

Outbound DNS forwarding

Answer

Cloud Router with BGP

Answer

Private DNS zone with peering

Question 12

A company has two HA VPN tunnels between GCP and on-premises. They want to use both tunnels simultaneously for load balancing traffic. Which BGP feature should they configure on the Cloud Router to achieve equal-cost multipath (ECMP)?

Accepted Answer

Advertise identical routes with equal BGP metrics (AS path length, MED, etc.) from both tunnels.. ECMP is achieved by having multiple BGP paths with equal MED and AS path length. The Cloud Router automatically load balances if routes have equal metrics.

Answer

Use AS path prepending on one tunnel.

Answer

Set different MED values on each tunnel to prefer one.

Answer

Enable policy-based VPN instead of route-based.

Question 13

A company is planning a hybrid cloud connectivity strategy with Google Cloud. They need high bandwidth (10 Gbps) and low latency. They also want to avoid internet transit. Which TWO connectivity options meet these requirements? (Choose 2.)

Accepted Answer

Partner Interconnect. Dedicated Interconnect provides direct, high-bandwidth (up to 80 Gbps per circuit) physical connection with low latency, not over the internet. Partner Interconnect also provides high bandwidth via a service provider, often at 1 Gbps or 10 Gbps, and is not internet-based. VPN uses the internet and does not guarantee bandwidth or low latency.

Answer

CDN Interconnect

Answer

Direct Peering

Answer

Cloud VPN

Question 14

A network engineer is configuring HA VPN between GCP and an on-premises network. They need to ensure that the VPN tunnels are established and BGP sessions are up. Which THREE steps are required? (Choose 3.)

Accepted Answer

Create an HA VPN gateway with two interfaces and two external IPs.. To establish HA VPN, you must create the VPN gateway with two interfaces and two external IPs, configure a Cloud Router to handle BGP, and create two VPN tunnels (one for each interface) with IKEv2 configuration. Pre-shared keys or certificates are part of tunnel configuration, but the key step is creating the tunnels.

Answer

Configure firewall rules to allow IKE traffic.

Answer

Set up Cloud NAT for internet access.

Question 15

A company wants to use BGP traffic engineering to control how traffic flows between GCP and their on-premises network over two Dedicated Interconnect connections. Which TWO BGP attributes can they use on Cloud Router? (Choose 2.)

Accepted Answer

BGP communities. On Cloud Router, you can set MED (metric) to influence inbound traffic and use AS path prepending (though not directly on Cloud Router; you can influence outbound via MED). Actually, Cloud Router supports setting MED on advertised routes. BGP communities can also be used for tagging routes. Weight is a Cisco-specific attribute, not available on Cloud Router.

Answer

Weight

Answer

Local preference

Answer

AS path prepending