Courseiva

PCNE · topic practice

Designing, Planning, and Prototyping a GCP Network practice questions

Practise Google Professional Cloud Network Engineer Designing, Planning, and Prototyping a GCP Network practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Designing, Planning, and Prototyping a GCP Network
Practice 10 questionsBrowse domain →

What the exam tests

What to know about Designing, Planning, and Prototyping a GCP Network

Designing, Planning, and Prototyping a GCP Network questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Designing, Planning, and Prototyping a GCP Network exam traps

  • ▸Answering from memory before reading the full scenario.
  • ▸Missing a constraint such as cost, availability, security, scope or command context.
  • ▸Choosing a broad answer when the question asks for the most specific fix.
  • ▸Ignoring why the wrong options are tempting.

Practice set

Designing, Planning, and Prototyping a GCP Network questions

20 questions · select your answer, then reveal the explanation

Question 1hardmultiple choice
Read the full Designing, Planning, and Prototyping a GCP Network explanation →

A company has deployed a Global External HTTP(S) Load Balancer with a backend service that points to an instance group in us-central1. The load balancer's frontend uses a reserved static external IP address. Users in Europe report high latency, while users in Asia cannot reach the application at all. The application works fine when accessed directly via the instance group's internal IPs from within us-central1. Which action should be taken to resolve the issue?

Question 2hardmulti select
Read the full VPN explanation →

Which THREE of the following are required to set up a highly available Cloud VPN with dynamic routing? (Choose THREE.)

Question 3hardmultiple choice
Open the full BGP breakdown →

A company has a complex on-premises network with multiple BGP AS numbers. They are connecting to GCP using Cloud VPN and wish to advertise specific prefixes. They want to ensure that only selected on-prem prefixes are advertised to GCP and no other prefixes leak. What is the best approach?

Question 4mediummulti select
Read the full Designing, Planning, and Prototyping a GCP Network explanation →

Which TWO services can be used to provide outbound connectivity to the internet for private VMs in a VPC? (Assume VMs have no external IPs.)

Question 5mediummultiple choice
Open the full BGP breakdown →

Refer to the exhibit. A network engineer checks the BGP status of a Cloud Router. The on-prem router has two BGP peers configured. What is the most likely cause of the IDLE session for the second peer?

Exhibit

gcloud compute routers get-status my-router --region us-central1
status:
  bgpPeerStatus:
  - ipAddress: 10.0.0.1
    peerIpAddress: 10.0.0.2
    sessionState: ESTABLISHED
    advertisedRoutes:
    - 192.168.1.0/24
    - 192.168.2.0/24
  - ipAddress: 10.0.0.3
    peerIpAddress: 10.0.0.4
    sessionState: IDLE
    advertisedRoutes: []
Question 6mediummultiple choice
Read the full Designing, Planning, and Prototyping a GCP Network explanation →

A company is designing a global application that requires low-latency access to GCP services like Cloud Storage and BigQuery. They also need to minimize egress costs for traffic to the internet. Which network service tier should they choose for their GCP resources?

Question 7mediummultiple choice
Review the full subnetting walkthrough →

An organization uses Shared VPC with a host project and multiple service projects. They want to allow a service project team to create Compute Engine instances using a specific subnet, but not manage other subnets. Which IAM role should they grant at the subnet level?

Question 8easymultiple choice
Read the full DNS explanation →

A company uses Cloud DNS to manage their domain example.com. They want to resolve queries for example.com from their on-premises DNS servers without transferring the zone. Which Cloud DNS feature should they use?

Question 9mediummultiple choice
Read the full VPN explanation →

A company has two VPCs (Production and Development) that are peered. The Development VPC has a custom route to an on-premises network via a VPN tunnel. They want the Production VPC to automatically learn this route. What must be configured on the VPC peering?

Question 10mediummultiple choice
Open the full BGP breakdown →

An organization wants to use Cloud Router with BGP to advertise a specific on-premises subnet (10.0.1.0/24) to its GCP VPC. Which BGP attribute should they use to influence route selection if multiple paths exist?

Question 11hardmulti select
Read the full Designing, Planning, and Prototyping a GCP Network explanation →

An organization wants to isolate development and production environments using separate VPC networks within the same project. They need the development VPC to have access to a shared service, such as a Cloud SQL instance, which resides in a separate project. Which THREE actions are required to achieve this? (Choose THREE.)

Question 12hardmulti select
Open the full VLAN trunking answer →

A company is migrating workloads to Google Cloud and wants to use Cloud Interconnect for low-latency connectivity. They have two on-premises locations and need to connect to multiple GCP regions. Which two statements are true about using VLAN attachments with Dedicated Interconnect? (Choose TWO.)

Question 13mediummultiple choice
Read the full Designing, Planning, and Prototyping a GCP Network explanation →

Your company is deploying a multi-tier web application on Google Kubernetes Engine (GKE) with a regional cluster. You need to design network policies to allow traffic only from the frontend pods to the backend pods on port 8080. Which of the following is the most secure and recommended approach?

Question 14hardmultiple choice
Read the full Designing, Planning, and Prototyping a GCP Network explanation →

A company is designing a hybrid connectivity solution between an on-premises data center and Google Cloud. They have a high bandwidth requirement of 20 Gbps and need a service level agreement (SLA) of 99.99% availability. Which connectivity option should they choose?

Question 15easymultiple choice
Read the full Designing, Planning, and Prototyping a GCP Network explanation →

A network engineer needs to design a VPC network for a global application that will have Compute Engine instances in multiple regions. The instances need to communicate with each other using internal IP addresses. What is the simplest way to enable this communication?

Question 16mediummulti select
Read the full Designing, Planning, and Prototyping a GCP Network explanation →

Which TWO of the following are valid methods to reduce latency between users in Europe and a GCP-hosted application?

Question 17hardmulti select
Read the full Designing, Planning, and Prototyping a GCP Network explanation →

Which THREE of the following are requirements for implementing a Global External HTTP(S) Load Balancer with an external backend?

Question 18hardmultiple choice
Review the full subnetting walkthrough →

A network engineer is troubleshooting connectivity from a Compute Engine instance in subnet-a to a Google Cloud Storage bucket. The instance has no external IP address. Based on the exhibit, what is the most likely cause of the connectivity issue?

Exhibit

Refer to the exhibit.

```
gcloud compute networks subnets describe subnet-a --region us-central1
creationTimestamp: '2024-01-15T10:00:00.000-08:00'
description: ''
enableFlowLogs: false
gatewayAddress: 10.0.0.1
id: '123456789'
ipCidrRange: 10.0.0.0/24
kind: compute#subnetwork
logConfig: null
name: subnet-a
network: https://www.googleapis.com/compute/v1/projects/my-project/global/networks/vpc-1
privateIpGoogleAccess: false
purpose: PRIVATE
region: https://www.googleapis.com/compute/v1/projects/my-project/regions/us-central1
role: null
secondaryIpRanges: []
selfLink: https://www.googleapis.com/compute/v1/projects/my-project/regions/us-central1/subnetworks/subnet-a
state: READY
```
Question 19easymultiple choice
Open the full BGP breakdown →

Based on the exhibit, what is the purpose of Cloud Router's BGP configuration?

Exhibit

Refer to the exhibit.

```
Resource: Cloud Router
Name: router-1
Region: us-central1
Network: vpc-1
BGP: Autonomous System Number (ASN): 65001
Advertised IP ranges: 10.0.0.0/16
BGP sessions:
  - peer: on-prem-router
    peer ASN: 65002
    peer IP: 192.168.1.1
    Cloud Router IP: 169.254.0.1
    Advertised route priority: 100
    Status: Established

On-premises router BGP table:
  Network          Next Hop        Metric
  10.0.0.0/16      169.254.0.1     0
  0.0.0.0/0        192.168.1.1     0
```
Question 20hardmultiple choice
Open the full BGP breakdown →

A company has a VPC with subnets in us-east1 and europe-west1. They have a Compute Engine instance in us-east1 with an internal IP 10.0.1.2. They need to allow SSH (port 22) from a specific on-premises IP 203.0.113.5 via Cloud VPN. The Cloud VPN tunnel uses a Cloud Router with BGP. The on-premises network advertises the route for 203.0.113.5/32 to the Cloud Router. Which firewall rule must be created?

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Sign up freeLog in

Focused Designing, Planning, and Prototyping a GCP Network sessions

Start a Designing, Planning, and Prototyping a GCP Network only practice session

Every question in these sessions is drawn from the Designing, Planning, and Prototyping a GCP Network domain — nothing else.

10 questions20 questions30 questions50 questions
Browse all Designing, Planning, and Prototyping a GCP Network questions →Mixed PCNE session

Related practice questions

Related PCNE topic practice pages

Move into related areas when this topic feels solid.

Configuring Network Services practice questions

Sharpen your PCNE knowledge of Configuring Network Services.

Managing, Monitoring, and Optimising Network Operations practice questions

Work through PCNE questions on Managing, Monitoring, and Optimising Network Operations.

Implementing Hybrid Interconnectivity practice questions

Work through PCNE questions on Implementing Hybrid Interconnectivity.

Designing, Planning, and Prototyping a GCP Network practice questions

Practise PCNE questions linked to Designing, Planning, and Prototyping a GCP Network.

Implementing VPC Instances practice questions

Sharpen your PCNE knowledge of Implementing VPC Instances.

Implementing network security practice questions

Sharpen your PCNE knowledge of Implementing network security.

Implementing a Virtual Private Cloud practice questions

Implementing a Virtual Private Cloud practice questions for PCNE.

PCNE fundamentals practice questions

Practise PCNE questions linked to PCNE fundamentals.

PCNE scenario practice questions

Targeted PCNE practice covering PCNE scenario.

PCNE troubleshooting practice questions

PCNE troubleshooting practice questions for PCNE.

Frequently asked questions

What does the PCNE exam test about Designing, Planning, and Prototyping a GCP Network?
Designing, Planning, and Prototyping a GCP Network questions test whether you can apply the concept in context, not just recognise a definition.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Designing, Planning, and Prototyping a GCP Network questions in a focused session?
Yes — the session launcher on this page draws every question from the Designing, Planning, and Prototyping a GCP Network domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other PCNE topics?
Use the topic links above to move to related areas, or go back to the PCNE question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the PCNE exam covers. They are not copied from any real exam or dump site.