PCNE Managing, Monitoring, and Optimising Network Operations — All Questions With Answers

An engineer notices that VPC Flow Logs are enabling on a subnet but only a fraction of traffic is logged. What is the most likely cause?

Question 2hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has two VPCs connected via VPC Network Peering. Traffic from an instance in VPC A to an instance in VPC B is failing. Connectivity Tests show that the expected route exists and firewall rules allow the traffic. What is a possible cause?

Question 3mediummultiple choice

An engineer is troubleshooting high latency between a Compute Engine instance in us-central1 and an instance in europe-west1. Which tool can show per-region latency and packet loss?

Question 4easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

What is the default MTU for packets sent between VMs within the same VPC network in Google Cloud?

Question 5hardmulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is experiencing a BGP session flap between Cloud Router and an on-premises router. Which THREE actions should the engineer take to diagnose the issue?

Question 6mediummulti select

A company wants to reduce outbound data transfer costs from Compute Engine to the internet. Which TWO strategies are effective?

Question 7mediummultiple choice

A company has enabled VPC Flow Logs on a subnet with the default sample rate. They notice that only 50% of flows are being logged. What is the most likely reason?

Question 8mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has a VPC with a Cloud Router using BGP to advertise prefixes to an on-premises network. The BGP session keeps flapping. What is a likely cause?

Question 9mediummultiple choice

A company is using a global external HTTP(S) load balancer to serve traffic from multiple regions. They notice high egress costs for traffic served to users in Asia. What change could reduce costs?

Question 10hardmulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is experiencing packet loss between two Compute Engine instances in different zones within the same region. They suspect MTU issues. Which three actions should they take to diagnose and resolve? (Choose three.)

Question 11mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has deployed a global HTTP Load Balancer with Cloud CDN to serve content to users worldwide. They notice high egress costs from the origin region. What is the most cost-effective solution to reduce egress from the origin?

Question 12mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An engineer notices that some packets sent from a Compute Engine VM in GCP to an on-premises server via a VPN tunnel are being fragmented. The on-premises server is not receiving the fragmented packets. What is the most likely cause?

Question 13mediummultiple choice

A company is using VPC Flow Logs to analyze traffic patterns. They need to reduce the volume of logs by approximately 75% while still capturing representative data for troubleshooting. What is the most effective configuration change?

Question 14mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization has multiple VPC networks in a project and wants to centrally manage firewall rules across all networks using a single set of rules. Which approach should they take?

Question 15hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has two VPC networks connected via VPC peering. They notice asymmetric routing: traffic from Network A to Network B follows one path, but return traffic from B to A takes a different path. This is causing connectivity issues for stateful firewalls. What is the likely cause?

Question 16easymultiple choice

A developer wants to log all denied firewall rule events for security auditing purposes. What is the simplest way to achieve this without modifying existing firewall rules?

Question 17mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization runs a web application on Compute Engine behind a regional external HTTP(S) load balancer. They need to log HTTP request details (e.g., user-agent, status codes) to BigQuery for analysis. Which logging feature should they enable?

Question 18mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is hitting the quota for number of firewall rules per VPC network. They need to add more rules without requesting a quota increase. Which approach can reduce the number of rules?

Question 19hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer is troubleshooting BGP session flaps between a Cloud Router and an on-premises router. The Cloud Router logs show that the session goes down and up repeatedly every few minutes. What is the most common cause of such flapping?

Question 20mediummulti select

A company is designing a multi-region application on GCP and wants to optimize egress costs. Which TWO of the following strategies will reduce cross-region egress costs? (Choose two.)

Question 21mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A security engineer needs to identify overly permissive firewall rules and shadowed rules (rules that never match because a higher priority rule overrides them). Which TWO Network Intelligence Center tools can help? (Choose two.)

Question 22hardmulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is experiencing periodic packet loss between two Compute Engine instances in the same region but different zones. They have enabled VPC Flow Logs and see that the flows are marked with 'RTT' latency. Which THREE actions should they take to diagnose the issue? (Choose three.)

Question 23mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization has a global web application deployed behind an External HTTPS Load Balancer. They want to reduce egress costs for users in Europe who are served from the same region. The application is already using Cloud CDN. Which additional action will MOST effectively reduce egress costs for these users?

Question 24mediummultiple choice

A network engineer notices asymmetric routing between two VPCs connected via VPC peering. Traffic from VPC A to VPC B flows correctly, but return traffic from VPC B to VPC A drops. What is the most likely cause?

Question 25mediummultiple choice

A company wants to analyze VPC Flow Logs to identify the top talkers (source IPs) generating the most traffic to their web servers. They have enabled VPC Flow Logs on the subnet. Where should they export the logs for cost-effective querying and analysis?

Question 26hardmultiple choice

A network engineer is troubleshooting connectivity issues between two Compute Engine instances in the same VPC but different subnets (us-east1 and europe-west1). The engineer suspects an MTU issue. What is the default MTU for traffic within Google Cloud, and what MTU should the engineer expect when packets traverse the internet?

Question 27mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has a VPC with 200 custom routes and wants to set up VPC peering with another VPC. The VPC peering quota limits the number of routes per VPC. What should the engineer do to avoid hitting the quota?

Question 28hardmultiple choice

A network engineer is investigating packet loss between two GCP regions using the Performance Dashboard. The dashboard shows high packet loss but no corresponding latency increase. What is the most likely cause of this packet loss?

Question 29easymultiple choice

Read the full DNS explanation →

A developer wants to enable VPC Flow Logs on a subnet to capture metadata about IP traffic. They want to reduce costs by logging only a sample of traffic. What is the default sampling rate for VPC Flow Logs?

Question 30mediummulti select

A security team wants to capture and analyze all DNS queries from their Compute Engine instances to detect potential data exfiltration. They have enabled VPC Flow Logs. Which TWO additional steps should they take to capture DNS query details?

Question 31mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is using Cloud Router with BGP for connectivity to an on-premises network via Partner Interconnect. The BGP session is flapping. Which THREE actions should the engineer take to diagnose the issue?

Question 32mediummultiple choice

A company uses VPC Flow Logs to analyze traffic patterns. They notice that the logs show only 50% of the actual flows. What is the most likely cause?

Question 33hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has two VPC networks connected via VPC Network Peering. They observe asymmetric routing causing connectivity issues. Which configuration is most likely to be the root cause?

Question 34hardmulti select

A company uses VPC Flow Logs exported to BigQuery for security analysis. They need to identify traffic to a known malicious IP. Which THREE fields can be used in a BigQuery query to filter this traffic? (Choose THREE.)

Question 35easymulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer is troubleshooting high latency between two VM instances in different GCP regions. Which TWO tools can help identify packet loss and latency issues? (Choose TWO.)

Question 36hardmulti select

A company is migrating to Google Cloud and needs to connect their on-premises data center to a VPC using Cloud VPN with dynamic routing (BGP). They want high availability and automatic failover. Which THREE components are required? (Choose THREE.)

Question 37mediummulti select

An engineer needs to monitor Cloud NAT gateway usage for cost allocation and troubleshooting. Which TWO types of logs should they enable? (Choose TWO.)

Question 38mediummultiple choice

Your team manages a Shared VPC host project with 20 service projects. Security auditors require that all VPC Flow Logs across every service project subnet are aggregated into a single BigQuery dataset in the host project for correlation. You need a solution that scales as new service projects are added. What should you do?

Question 39mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

Your team operates a Shared VPC host project that provides subnets to multiple service projects. A service project owner needs to see detailed flow logs for the subnet their VM uses, but you must prevent them from seeing flow logs for any other subnet in the Shared VPC. What should you do?

Question 40mediummultiple choice

Your team runs a microservices application on GKE. You need to monitor the latency of individual services and identify which service calls are causing slowdowns. You want to use a managed service that automatically captures distributed traces without modifying application code. Which Google Cloud service should you use?

Question 41mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company runs a critical application on a Compute Engine managed instance group behind an internal TCP/UDP load balancer in us-central1. The operations team needs to be alerted whenever the number of healthy backends drops below the configured threshold for more than 5 minutes. They also want to avoid false alerts during planned maintenance. Which Google Cloud monitoring approach should they implement?

Question 42mediummultiple choice

Your company uses Cloud NAT for outbound traffic from a private GKE cluster. You need to monitor the NAT allocation and identify when a VM instance is using all its allocated ports, which could cause connection failures. Which Cloud NAT metric should you use?

Question 43hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

You have a VPC with two subnets in us-central1 and europe-west1. You need to capture flow logs for all VM traffic in both subnets, but you want to reduce log volume by excluding traffic to and from a specific CIDR range used for health checks. What should you do?

Question 44hardmulti select

Your organization uses Cloud Logging to monitor network infrastructure. You need to create a log-based alert that notifies your team when a firewall rule is deleted in any project within the organization. Which two steps should you take? (Choose two.)

Question 45mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A retail company runs a three-tier web application on Compute Engine instances behind an internal TCP/UDP load balancer. The network operations team needs to monitor the distribution of traffic across the load balancer's backend instances and alert when any single instance receives more than 60% of the total traffic. Which approach should the team use to obtain per-backend traffic distribution metrics and configure an alerting policy?

Question 46mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

You manage a Shared VPC host project with several service projects. A service project team reports that they cannot create a VM with an external IP in subnet 'app-subnet' (us-central1). You need to determine whether the Shared VPC subnet has external IP addresses disabled. Which gcloud command should you run?

Question 47mediummultiple choice

You need to monitor the latency of traffic between two Compute Engine instances in different regions. You want to receive an alert if the round-trip time exceeds 100 ms. Which Google Cloud service should you use?

Question 48easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has a VPC network with several subnets. They want to monitor the amount of egress traffic leaving the VPC to the internet and set up an alert if it exceeds a certain threshold. Which Google Cloud feature should they use to collect the necessary metrics?

Question 49hardmultiple choice

A financial services company has a Shared VPC host project with multiple service projects. The network team wants to monitor all VPC Flow Logs from all service projects in a central Cloud Logging bucket for long-term retention and analysis. They need to ensure that the logs are stored in a single project and are accessible only to the central security team. Which configuration should they implement?

Question 50easymultiple choice

A company has a VPC with several subnets. They want to monitor network traffic for security analysis and need to retain flow logs for 1 year at the lowest cost. Where should they store the flow logs?

Question 51easymultiple choice

A startup has a VPC network with several subnets in us-central1. They want to capture IP traffic metadata for all VM instances in these subnets to troubleshoot connectivity issues. They need to enable VPC Flow Logs with minimal configuration and retain logs for 30 days. What should they do?

Question 52hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A healthcare company has a VPC with several subnets and uses Cloud NAT for outbound internet access. The security team needs to identify which Compute Engine instances are making outbound connections to a specific external IP address for compliance auditing. They want to minimize logging costs and only capture the necessary data. Which logging configuration should they use?

Question 53hardmultiple choice

A company uses a global external HTTP(S) load balancer with a backend service that has instances in multiple regions. The security team wants to analyze the load balancer's logs to detect potential DDoS attacks. They need to query the logs for requests with specific HTTP status codes and client IPs, and they want to retain the logs for 90 days for forensic analysis. Which approach should they take?

Question 54hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A healthcare company has a VPC with Cloud NAT configured for outbound internet access. They need to monitor and alert on the number of allocated ports in the NAT gateway to prevent port exhaustion, which could disrupt outbound connections. They want to use Cloud Monitoring and receive notifications when port utilization exceeds 80%. What should they do?

Question 55easymultiple choice

Your company runs a critical web application on a managed instance group behind an external TCP proxy load balancer. You need to receive alerts when the load balancer's backend health check status changes to UNHEALTHY. Which Google Cloud service should you use to monitor and alert on this metric?

Question 56mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

Your organization uses a Cloud Interconnect connection to on-premises. You need to monitor the interconnect's utilization and receive alerts when it exceeds 80% for 5 minutes. Which Google Cloud service should you use to set up this alert?

Question 57mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer needs to verify that traffic from a specific Compute Engine instance can reach a Cloud SQL database in a different VPC. Which Google Cloud tool should be used to test this reachability?

Question 58easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company wants to analyze VPC Flow Logs to understand which external IPs are generating the most outbound traffic. What is the most scalable way to store and query these logs?

Question 59easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

Which Network Intelligence Center tool provides a visual representation of your VPC network, including instances, subnets, firewall rules, and routes?

Question 60mediummultiple choice

A security team wants to capture all traffic from a Compute Engine instance for intrusion detection. Which service should be used to copy traffic to a third-party IDS appliance running on another instance?

Question 61hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is using Cloud NAT for outbound traffic. They want to log when a connection fails due to resource exhaustion. Which logging feature should be enabled?

Question 62mediummultiple choice

An organization needs to reduce egress costs for a global application serving users worldwide. The application serves static content from Compute Engine instances. Which action is most cost-effective?

Question 63hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer has set up a Cloud Router with BGP for an HA VPN. The BGP session is flapping. Which log should be examined to diagnose the issue?

Question 64mediummultiple choice

A company wants to analyze firewall rule effectiveness by identifying rules that are never hit or are shadowed. Which Network Intelligence Center tool should be used?

Question 65mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A security engineer wants to monitor and analyze traffic to a load-balanced web application. Which TWO services can provide detailed logs of HTTP requests and responses?

Question 66easymultiple choice

A network engineer wants to test reachability between a Compute Engine instance in VPC A and a Cloud SQL instance in VPC B, which are connected via VPC peering. Which Google Cloud tool should be used to check if firewall rules or routes are blocking traffic?

Question 67hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization has a VPC with multiple subnets and Cloud NAT configured for outbound internet access. They need to analyze which instances are using the most egress bandwidth to optimize costs. Which approach is most effective?

Question 68mediummultiple choice

A network engineer wants to capture all network traffic from a set of Compute Engine instances for security monitoring by an IDS appliance. Which Google Cloud service should be used?

Question 69easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization is using Cloud CDN to deliver content globally. Which of the following is a primary benefit of using Cloud CDN?

Question 70mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company wants to reduce egress costs for traffic going to Google APIs (e.g., Cloud Storage, BigQuery) from Compute Engine instances. Which configuration should they use?

Question 71hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An engineer is troubleshooting asymmetric routing between two VPCs connected via VPC peering. They notice that return traffic takes a different path. What is a common cause of asymmetric routing in this scenario?

Question 72mediummultiple choice

A company wants to analyze HTTP load balancer access logs to understand user behavior and traffic patterns. Which approach is recommended for long-term analysis and querying?

Question 73easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization has a project with multiple VPCs. They need to know the maximum number of firewall rules allowed per VPC. Where should they look?

Question 74hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer is using Connectivity Tests to diagnose a reachability issue between two instances in the same VPC but different subnets. The test indicates that traffic is denied by firewall rules. However, the engineer cannot find any firewall rule denying the traffic. What is a possible explanation?

Question 75mediummulti select

A company wants to audit firewall rules for security best practices. They need to identify overly permissive rules (e.g., allowing all traffic from 0.0.0.0/0) and rules that are never used. Which two Google Cloud tools can help? (Choose two.)

Question 76mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company uses Cloud NAT for outbound internet access from private instances. They want to monitor for connection failures due to NAT resource exhaustion. Which two steps should they take? (Choose two.)

Question 77easymultiple choice

A network engineer wants to test whether a Compute Engine VM can reach a Cloud SQL instance in a different VPC network, considering firewall rules and VPC peering. Which Google Cloud tool should they use?

Question 78hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A security team needs to capture all traffic to and from a specific Compute Engine instance for forensic analysis. They want to send the mirrored traffic to a third-party IDS appliance running on a separate VM in the same VPC. Which GCP feature should they use, and what is a key consideration?

Question 79easymultiple choice

A network engineer wants to see a real-time graphical representation of the topology of their VPC network, including instances, subnets, and load balancers. Which Network Intelligence Center tool should they use?

Question 80easymultiple choice

A network engineer wants to test whether a VM in VPC A can reach a VM in VPC B that is connected via VPC peering. The engineer suspects that firewall rules or routes are blocking traffic. Which Google Cloud service should they use to test the path and identify the blocking rule?

Question 81easymultiple choice

A company is using Cloud NAT to allow private VMs to access the internet. They want to troubleshoot connectivity failures and analyze connection attempts that were dropped due to NAT resource exhaustion. What should they enable?

Question 82mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization has a VPC with several subnets and wants to monitor firewall rule usage to identify rules that are overly permissive (e.g., allowing all traffic from 0.0.0.0/0). Which Google Cloud service provides this insight?

Question 83mediummultiple choice

A company uses an external HTTP Load Balancer with Cloud Armor. They want to log all requests that are blocked by Cloud Armor security policies for compliance auditing. What should they enable?

Question 84hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization wants to mirror all traffic from a set of Compute Engine instances to a third-party IDS appliance running on a separate instance in the same VPC. The IDS appliance must receive a copy of both ingress and egress traffic without impacting production traffic. Which Google Cloud service should they use?

Question 85hardmulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company wants to optimize costs for egress traffic from Compute Engine instances to the internet. They are considering using Cloud CDN and Private Google Access. Which TWO statements correctly describe how these services can reduce egress costs?

Question 86easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An engineer needs to verify that a Compute Engine instance can reach a specific IP address on the internet, considering firewall rules and routes. Which Network Intelligence Center tool should they use?

Question 87mediummultiple choice

A network engineer wants to capture all traffic to and from a specific Compute Engine instance for security analysis and forward it to an IDS appliance in another VPC. Which GCP service should they use?

Question 88mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization wants to reduce egress costs for data sent from Compute Engine instances to users worldwide. Which TWO approaches should they consider? (Choose TWO.)

Question 89mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization needs to monitor and analyze firewall rule activity for security auditing. Which TWO actions should they take? (Choose TWO.)

Question 90hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

Your organization has a VPC with several subnets. You need to monitor the number of active connections to a Cloud NAT gateway and receive an alert when the number exceeds a threshold. You also want to visualize the data in a dashboard. Which combination of steps should you take?

Question 91hardmultiple choice

A network engineer is troubleshooting intermittent connectivity issues between two VPC networks connected via VPC Network Peering. The engineer suspects that some traffic is being dropped due to firewall rules. They need to determine which firewall rules are being applied to a specific VM's traffic and whether any rules are blocking it. Which tool should they use?

Question 92hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

You manage a VPC with several subnets and want to ensure that all outbound internet traffic from your Compute Engine instances goes through a centralized NAT solution. You have configured Cloud NAT on a Cloud Router in the us-central1 region. However, you notice that instances in europe-west1 are not using Cloud NAT. What is the most likely cause?

Question 93mediummulti select

A company has deployed a global external HTTP(S) load balancer with Cloud CDN enabled. They want to monitor the performance and health of the load balancer and its backends. They need to set up alerts for when the load balancer's 5xx error rate exceeds a threshold and when backend latency increases. Which two Cloud Monitoring metrics should they use to create alerting policies? (Choose two.)

Question 94mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A retail company runs a global e-commerce platform on Compute Engine VMs behind a global external HTTP(S) load balancer. The operations team needs to receive an alert whenever the load balancer's 5xx error rate exceeds 1% for a sustained period of 5 minutes, so they can investigate backend failures. They want to use Cloud Monitoring and avoid custom scripts. What should they do?

Question 95mediummultiple choice

You manage a VPC with a Cloud VPN tunnel to on-premises. You need to monitor the tunnel's throughput and receive an alert if it drops below 10 Mbps for 5 minutes. Which Google Cloud service should you use to collect the metric and trigger the alert?

Question 96easymultiple choice

A company has a VPC network with several subnets. They want to monitor the number of bytes sent and received by each VM instance over time, and they need to visualize this data in a dashboard. They also want to set up an alert if the outgoing traffic from a particular instance exceeds a threshold. Which Google Cloud service should they use to collect and visualize these metrics?

Question 97hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A financial services company has a Shared VPC setup where the host project contains a central VPC, and multiple service projects attach to it. The network team wants to monitor all VPC Flow Logs from the host project's subnets and analyze traffic patterns across all service projects. They need to aggregate logs in a central location for long-term analysis and querying with SQL. What should they do?

Question 98hardmultiple choice

A network engineer needs to analyze historical network traffic patterns in a VPC to identify peak usage times and potential bottlenecks. The VPC has VPC Flow Logs enabled and exported to Cloud Logging. The engineer wants to query and visualize the data over the past 30 days. Which approach should they use?

Question 99mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer is responsible for a VPC network that uses Cloud NAT to provide outbound internet access for instances without external IPs. The engineer needs to troubleshoot why some instances are unable to reach certain external destinations. The engineer wants to see detailed logs of NAT translations, including the source IP and port, destination IP and port, and whether the connection was allowed or denied. Which logging feature should the engineer enable?

Question 100mediummultiple choice

A network engineer manages a Shared VPC host project with 40 service projects. The security team reports that a newly created firewall rule in the host project is not taking effect on VM instances in one service project. The engineer confirms the rule targets the correct network tags and IP ranges. Which action should the engineer take to diagnose the issue?

Question 101hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A financial services company runs a hybrid environment with two Dedicated Interconnect attachments in different metros to a single Cloud Router. During a maintenance window, one attachment goes down unexpectedly. The on-premises team reports that some flows fail while others continue. The engineer needs to verify that the Cloud Router is properly re-advertising and learning routes after the failover. Which diagnostic approach should the engineer use?

Question 102mediummulti select

A media company streams live video to a global audience through a global external Application Load Balancer. Users in several regions report intermittent buffering and higher-than-expected latency. The network team wants to determine whether backend health, latency distribution, and error rates are contributing. Which two actions should the team take? (Choose two.)

Question 103easymultiple choice

A startup runs a three-tier application in a single VPC with separate subnets for web, application, and database tiers. The operations team wants to receive an alert whenever outbound traffic from the database subnet to the internet exceeds a defined threshold, so they can detect misconfigured instances. Which approach should they use?

Question 104mediummultiple choice

A retail company uses Cloud NAT to provide outbound internet access for private GKE nodes. Customers occasionally report failed API calls to a third-party payment provider, and the network team suspects port exhaustion on the NAT gateway. The team wants to confirm the cause and reduce recurrence. Which combination should the team implement?

Question 105hardmultiple choice

You have a VPC with a Cloud NAT gateway. You need to log NAT translations to troubleshoot connectivity issues for a specific VM. You want to capture both successful and failed translations. Which logging configuration should you enable on the Cloud NAT gateway?

Question 1mediummultiple choice

An engineer notices that VPC Flow Logs are enabling on a subnet but only a fraction of traffic is logged. What is the most likely cause?

Question 2hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has two VPCs connected via VPC Network Peering. Traffic from an instance in VPC A to an instance in VPC B is failing. Connectivity Tests show that the expected route exists and firewall rules allow the traffic. What is a possible cause?

Question 3mediummultiple choice

An engineer is troubleshooting high latency between a Compute Engine instance in us-central1 and an instance in europe-west1. Which tool can show per-region latency and packet loss?

Question 4easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

What is the default MTU for packets sent between VMs within the same VPC network in Google Cloud?

Question 5hardmulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is experiencing a BGP session flap between Cloud Router and an on-premises router. Which THREE actions should the engineer take to diagnose the issue?

Question 6mediummulti select

A company wants to reduce outbound data transfer costs from Compute Engine to the internet. Which TWO strategies are effective?

Question 7mediummultiple choice

A company has enabled VPC Flow Logs on a subnet with the default sample rate. They notice that only 50% of flows are being logged. What is the most likely reason?

Question 8mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has a VPC with a Cloud Router using BGP to advertise prefixes to an on-premises network. The BGP session keeps flapping. What is a likely cause?

Question 9mediummultiple choice

A company is using a global external HTTP(S) load balancer to serve traffic from multiple regions. They notice high egress costs for traffic served to users in Asia. What change could reduce costs?

Question 10hardmulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is experiencing packet loss between two Compute Engine instances in different zones within the same region. They suspect MTU issues. Which three actions should they take to diagnose and resolve? (Choose three.)

Question 11mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has deployed a global HTTP Load Balancer with Cloud CDN to serve content to users worldwide. They notice high egress costs from the origin region. What is the most cost-effective solution to reduce egress from the origin?

Question 12mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An engineer notices that some packets sent from a Compute Engine VM in GCP to an on-premises server via a VPN tunnel are being fragmented. The on-premises server is not receiving the fragmented packets. What is the most likely cause?

Question 13mediummultiple choice

A company is using VPC Flow Logs to analyze traffic patterns. They need to reduce the volume of logs by approximately 75% while still capturing representative data for troubleshooting. What is the most effective configuration change?

Question 14mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization has multiple VPC networks in a project and wants to centrally manage firewall rules across all networks using a single set of rules. Which approach should they take?

Question 15hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has two VPC networks connected via VPC peering. They notice asymmetric routing: traffic from Network A to Network B follows one path, but return traffic from B to A takes a different path. This is causing connectivity issues for stateful firewalls. What is the likely cause?

Question 16easymultiple choice

A developer wants to log all denied firewall rule events for security auditing purposes. What is the simplest way to achieve this without modifying existing firewall rules?

Question 17mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization runs a web application on Compute Engine behind a regional external HTTP(S) load balancer. They need to log HTTP request details (e.g., user-agent, status codes) to BigQuery for analysis. Which logging feature should they enable?

Question 18mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is hitting the quota for number of firewall rules per VPC network. They need to add more rules without requesting a quota increase. Which approach can reduce the number of rules?

Question 19hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer is troubleshooting BGP session flaps between a Cloud Router and an on-premises router. The Cloud Router logs show that the session goes down and up repeatedly every few minutes. What is the most common cause of such flapping?

Question 20mediummulti select

A company is designing a multi-region application on GCP and wants to optimize egress costs. Which TWO of the following strategies will reduce cross-region egress costs? (Choose two.)

Question 21mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A security engineer needs to identify overly permissive firewall rules and shadowed rules (rules that never match because a higher priority rule overrides them). Which TWO Network Intelligence Center tools can help? (Choose two.)

Question 22hardmulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is experiencing periodic packet loss between two Compute Engine instances in the same region but different zones. They have enabled VPC Flow Logs and see that the flows are marked with 'RTT' latency. Which THREE actions should they take to diagnose the issue? (Choose three.)

Question 23mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization has a global web application deployed behind an External HTTPS Load Balancer. They want to reduce egress costs for users in Europe who are served from the same region. The application is already using Cloud CDN. Which additional action will MOST effectively reduce egress costs for these users?

Question 24mediummultiple choice

A network engineer notices asymmetric routing between two VPCs connected via VPC peering. Traffic from VPC A to VPC B flows correctly, but return traffic from VPC B to VPC A drops. What is the most likely cause?

Question 25mediummultiple choice

A company wants to analyze VPC Flow Logs to identify the top talkers (source IPs) generating the most traffic to their web servers. They have enabled VPC Flow Logs on the subnet. Where should they export the logs for cost-effective querying and analysis?

Question 26hardmultiple choice

A network engineer is troubleshooting connectivity issues between two Compute Engine instances in the same VPC but different subnets (us-east1 and europe-west1). The engineer suspects an MTU issue. What is the default MTU for traffic within Google Cloud, and what MTU should the engineer expect when packets traverse the internet?

Question 27mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has a VPC with 200 custom routes and wants to set up VPC peering with another VPC. The VPC peering quota limits the number of routes per VPC. What should the engineer do to avoid hitting the quota?

Question 28hardmultiple choice

A network engineer is investigating packet loss between two GCP regions using the Performance Dashboard. The dashboard shows high packet loss but no corresponding latency increase. What is the most likely cause of this packet loss?

Question 29easymultiple choice

Read the full DNS explanation →

A developer wants to enable VPC Flow Logs on a subnet to capture metadata about IP traffic. They want to reduce costs by logging only a sample of traffic. What is the default sampling rate for VPC Flow Logs?

Question 30mediummulti select

A security team wants to capture and analyze all DNS queries from their Compute Engine instances to detect potential data exfiltration. They have enabled VPC Flow Logs. Which TWO additional steps should they take to capture DNS query details?

Question 31mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is using Cloud Router with BGP for connectivity to an on-premises network via Partner Interconnect. The BGP session is flapping. Which THREE actions should the engineer take to diagnose the issue?

Question 32mediummultiple choice

A company uses VPC Flow Logs to analyze traffic patterns. They notice that the logs show only 50% of the actual flows. What is the most likely cause?

Question 33hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has two VPC networks connected via VPC Network Peering. They observe asymmetric routing causing connectivity issues. Which configuration is most likely to be the root cause?

Question 34hardmulti select

A company uses VPC Flow Logs exported to BigQuery for security analysis. They need to identify traffic to a known malicious IP. Which THREE fields can be used in a BigQuery query to filter this traffic? (Choose THREE.)

Question 35easymulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer is troubleshooting high latency between two VM instances in different GCP regions. Which TWO tools can help identify packet loss and latency issues? (Choose TWO.)

Question 36hardmulti select

A company is migrating to Google Cloud and needs to connect their on-premises data center to a VPC using Cloud VPN with dynamic routing (BGP). They want high availability and automatic failover. Which THREE components are required? (Choose THREE.)

Question 37mediummulti select

An engineer needs to monitor Cloud NAT gateway usage for cost allocation and troubleshooting. Which TWO types of logs should they enable? (Choose TWO.)

Question 38mediummultiple choice

Your team manages a Shared VPC host project with 20 service projects. Security auditors require that all VPC Flow Logs across every service project subnet are aggregated into a single BigQuery dataset in the host project for correlation. You need a solution that scales as new service projects are added. What should you do?

Question 39mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

Your team operates a Shared VPC host project that provides subnets to multiple service projects. A service project owner needs to see detailed flow logs for the subnet their VM uses, but you must prevent them from seeing flow logs for any other subnet in the Shared VPC. What should you do?

Question 40mediummultiple choice

Your team runs a microservices application on GKE. You need to monitor the latency of individual services and identify which service calls are causing slowdowns. You want to use a managed service that automatically captures distributed traces without modifying application code. Which Google Cloud service should you use?

Question 41mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company runs a critical application on a Compute Engine managed instance group behind an internal TCP/UDP load balancer in us-central1. The operations team needs to be alerted whenever the number of healthy backends drops below the configured threshold for more than 5 minutes. They also want to avoid false alerts during planned maintenance. Which Google Cloud monitoring approach should they implement?

Question 42mediummultiple choice

Your company uses Cloud NAT for outbound traffic from a private GKE cluster. You need to monitor the NAT allocation and identify when a VM instance is using all its allocated ports, which could cause connection failures. Which Cloud NAT metric should you use?

Question 43hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

You have a VPC with two subnets in us-central1 and europe-west1. You need to capture flow logs for all VM traffic in both subnets, but you want to reduce log volume by excluding traffic to and from a specific CIDR range used for health checks. What should you do?

Question 44hardmulti select

Your organization uses Cloud Logging to monitor network infrastructure. You need to create a log-based alert that notifies your team when a firewall rule is deleted in any project within the organization. Which two steps should you take? (Choose two.)

Question 45mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A retail company runs a three-tier web application on Compute Engine instances behind an internal TCP/UDP load balancer. The network operations team needs to monitor the distribution of traffic across the load balancer's backend instances and alert when any single instance receives more than 60% of the total traffic. Which approach should the team use to obtain per-backend traffic distribution metrics and configure an alerting policy?

Question 46mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

You manage a Shared VPC host project with several service projects. A service project team reports that they cannot create a VM with an external IP in subnet 'app-subnet' (us-central1). You need to determine whether the Shared VPC subnet has external IP addresses disabled. Which gcloud command should you run?

Question 47mediummultiple choice

You need to monitor the latency of traffic between two Compute Engine instances in different regions. You want to receive an alert if the round-trip time exceeds 100 ms. Which Google Cloud service should you use?

Question 48easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company has a VPC network with several subnets. They want to monitor the amount of egress traffic leaving the VPC to the internet and set up an alert if it exceeds a certain threshold. Which Google Cloud feature should they use to collect the necessary metrics?

Question 49hardmultiple choice

A financial services company has a Shared VPC host project with multiple service projects. The network team wants to monitor all VPC Flow Logs from all service projects in a central Cloud Logging bucket for long-term retention and analysis. They need to ensure that the logs are stored in a single project and are accessible only to the central security team. Which configuration should they implement?

Question 50easymultiple choice

A company has a VPC with several subnets. They want to monitor network traffic for security analysis and need to retain flow logs for 1 year at the lowest cost. Where should they store the flow logs?

Question 51easymultiple choice

A startup has a VPC network with several subnets in us-central1. They want to capture IP traffic metadata for all VM instances in these subnets to troubleshoot connectivity issues. They need to enable VPC Flow Logs with minimal configuration and retain logs for 30 days. What should they do?

Question 52hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A healthcare company has a VPC with several subnets and uses Cloud NAT for outbound internet access. The security team needs to identify which Compute Engine instances are making outbound connections to a specific external IP address for compliance auditing. They want to minimize logging costs and only capture the necessary data. Which logging configuration should they use?

Question 53hardmultiple choice

A company uses a global external HTTP(S) load balancer with a backend service that has instances in multiple regions. The security team wants to analyze the load balancer's logs to detect potential DDoS attacks. They need to query the logs for requests with specific HTTP status codes and client IPs, and they want to retain the logs for 90 days for forensic analysis. Which approach should they take?

Question 54hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A healthcare company has a VPC with Cloud NAT configured for outbound internet access. They need to monitor and alert on the number of allocated ports in the NAT gateway to prevent port exhaustion, which could disrupt outbound connections. They want to use Cloud Monitoring and receive notifications when port utilization exceeds 80%. What should they do?

Question 55easymultiple choice

Your company runs a critical web application on a managed instance group behind an external TCP proxy load balancer. You need to receive alerts when the load balancer's backend health check status changes to UNHEALTHY. Which Google Cloud service should you use to monitor and alert on this metric?

Question 56mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

Your organization uses a Cloud Interconnect connection to on-premises. You need to monitor the interconnect's utilization and receive alerts when it exceeds 80% for 5 minutes. Which Google Cloud service should you use to set up this alert?

Question 57mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer needs to verify that traffic from a specific Compute Engine instance can reach a Cloud SQL database in a different VPC. Which Google Cloud tool should be used to test this reachability?

Question 58easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company wants to analyze VPC Flow Logs to understand which external IPs are generating the most outbound traffic. What is the most scalable way to store and query these logs?

Question 59easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

Which Network Intelligence Center tool provides a visual representation of your VPC network, including instances, subnets, firewall rules, and routes?

Question 60mediummultiple choice

A security team wants to capture all traffic from a Compute Engine instance for intrusion detection. Which service should be used to copy traffic to a third-party IDS appliance running on another instance?

Question 61hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company is using Cloud NAT for outbound traffic. They want to log when a connection fails due to resource exhaustion. Which logging feature should be enabled?

Question 62mediummultiple choice

An organization needs to reduce egress costs for a global application serving users worldwide. The application serves static content from Compute Engine instances. Which action is most cost-effective?

Question 63hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer has set up a Cloud Router with BGP for an HA VPN. The BGP session is flapping. Which log should be examined to diagnose the issue?

Question 64mediummultiple choice

A company wants to analyze firewall rule effectiveness by identifying rules that are never hit or are shadowed. Which Network Intelligence Center tool should be used?

Question 65mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A security engineer wants to monitor and analyze traffic to a load-balanced web application. Which TWO services can provide detailed logs of HTTP requests and responses?

Question 66easymultiple choice

A network engineer wants to test reachability between a Compute Engine instance in VPC A and a Cloud SQL instance in VPC B, which are connected via VPC peering. Which Google Cloud tool should be used to check if firewall rules or routes are blocking traffic?

Question 67hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization has a VPC with multiple subnets and Cloud NAT configured for outbound internet access. They need to analyze which instances are using the most egress bandwidth to optimize costs. Which approach is most effective?

Question 68mediummultiple choice

A network engineer wants to capture all network traffic from a set of Compute Engine instances for security monitoring by an IDS appliance. Which Google Cloud service should be used?

Question 69easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization is using Cloud CDN to deliver content globally. Which of the following is a primary benefit of using Cloud CDN?

Question 70mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company wants to reduce egress costs for traffic going to Google APIs (e.g., Cloud Storage, BigQuery) from Compute Engine instances. Which configuration should they use?

Question 71hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An engineer is troubleshooting asymmetric routing between two VPCs connected via VPC peering. They notice that return traffic takes a different path. What is a common cause of asymmetric routing in this scenario?

Question 72mediummultiple choice

A company wants to analyze HTTP load balancer access logs to understand user behavior and traffic patterns. Which approach is recommended for long-term analysis and querying?

Question 73easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization has a project with multiple VPCs. They need to know the maximum number of firewall rules allowed per VPC. Where should they look?

Question 74hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer is using Connectivity Tests to diagnose a reachability issue between two instances in the same VPC but different subnets. The test indicates that traffic is denied by firewall rules. However, the engineer cannot find any firewall rule denying the traffic. What is a possible explanation?

Question 75mediummulti select

A company wants to audit firewall rules for security best practices. They need to identify overly permissive rules (e.g., allowing all traffic from 0.0.0.0/0) and rules that are never used. Which two Google Cloud tools can help? (Choose two.)

Question 76mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company uses Cloud NAT for outbound internet access from private instances. They want to monitor for connection failures due to NAT resource exhaustion. Which two steps should they take? (Choose two.)

Question 77easymultiple choice

A network engineer wants to test whether a Compute Engine VM can reach a Cloud SQL instance in a different VPC network, considering firewall rules and VPC peering. Which Google Cloud tool should they use?

Question 78hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A security team needs to capture all traffic to and from a specific Compute Engine instance for forensic analysis. They want to send the mirrored traffic to a third-party IDS appliance running on a separate VM in the same VPC. Which GCP feature should they use, and what is a key consideration?

Question 79easymultiple choice

A network engineer wants to see a real-time graphical representation of the topology of their VPC network, including instances, subnets, and load balancers. Which Network Intelligence Center tool should they use?

Question 80easymultiple choice

A network engineer wants to test whether a VM in VPC A can reach a VM in VPC B that is connected via VPC peering. The engineer suspects that firewall rules or routes are blocking traffic. Which Google Cloud service should they use to test the path and identify the blocking rule?

Question 81easymultiple choice

A company is using Cloud NAT to allow private VMs to access the internet. They want to troubleshoot connectivity failures and analyze connection attempts that were dropped due to NAT resource exhaustion. What should they enable?

Question 82mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization has a VPC with several subnets and wants to monitor firewall rule usage to identify rules that are overly permissive (e.g., allowing all traffic from 0.0.0.0/0). Which Google Cloud service provides this insight?

Question 83mediummultiple choice

A company uses an external HTTP Load Balancer with Cloud Armor. They want to log all requests that are blocked by Cloud Armor security policies for compliance auditing. What should they enable?

Question 84hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization wants to mirror all traffic from a set of Compute Engine instances to a third-party IDS appliance running on a separate instance in the same VPC. The IDS appliance must receive a copy of both ingress and egress traffic without impacting production traffic. Which Google Cloud service should they use?

Question 85hardmulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A company wants to optimize costs for egress traffic from Compute Engine instances to the internet. They are considering using Cloud CDN and Private Google Access. Which TWO statements correctly describe how these services can reduce egress costs?

Question 86easymultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An engineer needs to verify that a Compute Engine instance can reach a specific IP address on the internet, considering firewall rules and routes. Which Network Intelligence Center tool should they use?

Question 87mediummultiple choice

A network engineer wants to capture all traffic to and from a specific Compute Engine instance for security analysis and forward it to an IDS appliance in another VPC. Which GCP service should they use?

Question 88mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization wants to reduce egress costs for data sent from Compute Engine instances to users worldwide. Which TWO approaches should they consider? (Choose TWO.)

Question 89mediummulti select

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

An organization needs to monitor and analyze firewall rule activity for security auditing. Which TWO actions should they take? (Choose TWO.)

Question 90hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

Your organization has a VPC with several subnets. You need to monitor the number of active connections to a Cloud NAT gateway and receive an alert when the number exceeds a threshold. You also want to visualize the data in a dashboard. Which combination of steps should you take?

Question 91hardmultiple choice

A network engineer is troubleshooting intermittent connectivity issues between two VPC networks connected via VPC Network Peering. The engineer suspects that some traffic is being dropped due to firewall rules. They need to determine which firewall rules are being applied to a specific VM's traffic and whether any rules are blocking it. Which tool should they use?

Question 92hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

You manage a VPC with several subnets and want to ensure that all outbound internet traffic from your Compute Engine instances goes through a centralized NAT solution. You have configured Cloud NAT on a Cloud Router in the us-central1 region. However, you notice that instances in europe-west1 are not using Cloud NAT. What is the most likely cause?

Question 93mediummulti select

A company has deployed a global external HTTP(S) load balancer with Cloud CDN enabled. They want to monitor the performance and health of the load balancer and its backends. They need to set up alerts for when the load balancer's 5xx error rate exceeds a threshold and when backend latency increases. Which two Cloud Monitoring metrics should they use to create alerting policies? (Choose two.)

Question 94mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A retail company runs a global e-commerce platform on Compute Engine VMs behind a global external HTTP(S) load balancer. The operations team needs to receive an alert whenever the load balancer's 5xx error rate exceeds 1% for a sustained period of 5 minutes, so they can investigate backend failures. They want to use Cloud Monitoring and avoid custom scripts. What should they do?

Question 95mediummultiple choice

You manage a VPC with a Cloud VPN tunnel to on-premises. You need to monitor the tunnel's throughput and receive an alert if it drops below 10 Mbps for 5 minutes. Which Google Cloud service should you use to collect the metric and trigger the alert?

Question 96easymultiple choice

A company has a VPC network with several subnets. They want to monitor the number of bytes sent and received by each VM instance over time, and they need to visualize this data in a dashboard. They also want to set up an alert if the outgoing traffic from a particular instance exceeds a threshold. Which Google Cloud service should they use to collect and visualize these metrics?

Question 97hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A financial services company has a Shared VPC setup where the host project contains a central VPC, and multiple service projects attach to it. The network team wants to monitor all VPC Flow Logs from the host project's subnets and analyze traffic patterns across all service projects. They need to aggregate logs in a central location for long-term analysis and querying with SQL. What should they do?

Question 98hardmultiple choice

A network engineer needs to analyze historical network traffic patterns in a VPC to identify peak usage times and potential bottlenecks. The VPC has VPC Flow Logs enabled and exported to Cloud Logging. The engineer wants to query and visualize the data over the past 30 days. Which approach should they use?

Question 99mediummultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A network engineer is responsible for a VPC network that uses Cloud NAT to provide outbound internet access for instances without external IPs. The engineer needs to troubleshoot why some instances are unable to reach certain external destinations. The engineer wants to see detailed logs of NAT translations, including the source IP and port, destination IP and port, and whether the connection was allowed or denied. Which logging feature should the engineer enable?

Question 100mediummultiple choice

A network engineer manages a Shared VPC host project with 40 service projects. The security team reports that a newly created firewall rule in the host project is not taking effect on VM instances in one service project. The engineer confirms the rule targets the correct network tags and IP ranges. Which action should the engineer take to diagnose the issue?

Question 101hardmultiple choice

Read the full Managing, Monitoring, and Optimising Network Operations explanation →

A financial services company runs a hybrid environment with two Dedicated Interconnect attachments in different metros to a single Cloud Router. During a maintenance window, one attachment goes down unexpectedly. The on-premises team reports that some flows fail while others continue. The engineer needs to verify that the Cloud Router is properly re-advertising and learning routes after the failover. Which diagnostic approach should the engineer use?

Question 102mediummulti select

A media company streams live video to a global audience through a global external Application Load Balancer. Users in several regions report intermittent buffering and higher-than-expected latency. The network team wants to determine whether backend health, latency distribution, and error rates are contributing. Which two actions should the team take? (Choose two.)

Question 103easymultiple choice

A startup runs a three-tier application in a single VPC with separate subnets for web, application, and database tiers. The operations team wants to receive an alert whenever outbound traffic from the database subnet to the internet exceeds a defined threshold, so they can detect misconfigured instances. Which approach should they use?

Question 104mediummultiple choice

A retail company uses Cloud NAT to provide outbound internet access for private GKE nodes. Customers occasionally report failed API calls to a third-party payment provider, and the network team suspects port exhaustion on the NAT gateway. The team wants to confirm the cause and reduce recurrence. Which combination should the team implement?

Question 105hardmultiple choice