Google Cloud certification practice
Practise Google Professional Cloud Network Engineer PCNE practice test — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps. Courseiva helps you prepare with realistic practice questions, topic-based revision, explained answers and structured study routes.
New here? Start with this
Recommended: 10-question diagnostic
Covers all 5 domains · takes ~5 min · no account needed · shows your weak areas immediately
Key facts for the Google Professional Cloud Network Engineer exam.
Exam cost
$200 USD / ~£160
Duration
120 minutes
Question count
~50-60 questions
Passing score
Pass / Fail (scaled score reported)
Validity
3 years
Delivered by
Kryterion (Webassessor)
Online proctored
Yes — available
Retake policy
100% free — no account required
Everything on Courseiva for PCNE is free — no subscription, no trial, no email wall.
Courseiva provides free Google Professional Cloud Network Engineer (PCNE) practice questions with original exam-style questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics. Courseiva is an independent platform and is not affiliated with Google Cloud.
14 days between attempts; after 3rd failure, 60-day waiting period
Question formats
The Google Cloud Professional Cloud Network Engineer certification demonstrates the ability to implement and manage networking infrastructure in Google Cloud. The exam covers Virtual Private Cloud design, hybrid connectivity (VPN, Interconnect, Peering), load balancing, Cloud DNS, network security, and network monitoring. Candidates must show they can architect complex multi-region, multi-project networks that meet security and performance requirements.
Official prerequisite
None — no formal prerequisites required
Recommended experience
3+ years of networking experience including 1+ year designing Google Cloud networks
Network engineers who design and manage enterprise-grade hybrid and cloud-native networks on Google Cloud
Should you skip this exam?
Skip if you lack a solid foundation in networking concepts such as BGP, subnetting, and firewalls
Courseiva study tip
Master VPC design patterns, Shared VPC, VPC peering, and Cloud Interconnect vs VPN trade-offs — these dominate the exam
UK salary range
£65,000 – £100,000
US salary range
$120,000 – $165,000
Job roles that cite PCNE
What certification to take next
The exam costs $200 USD.
Google does not publish a specific passing score. Candidates receive a Pass or Fail result.
It is rated Moderate-Hard (4/5). Deep knowledge of VPC architectures, BGP, and hybrid connectivity options is required.
Approximately 50-60 questions in multiple choice and multiple select format.
VPC design, Shared VPC, VPC peering, Cloud Interconnect, Cloud VPN, load balancing, Cloud DNS, firewall rules, network security, and network monitoring.
3 years. You must recertify before the credential expires.
Network and infrastructure engineers responsible for designing, implementing, and troubleshooting Google Cloud networks.
See how PCNE stacks up against related certifications.
Practice modes
Choose a mode that matches your current study phase. Use topic practice early on and mock exams closer to your exam date.
All PCNE Questions
Browse the full question bank organised by domain and difficulty.
Practice Test
Start a session with detailed answer explanations after each question.
Mock Exam
Simulate the real exam with a timed, full-length question set.
Quick 10
A 10-question warm-up — ideal for a short daily study session.
Flashcards
Reinforce key terms, commands, and protocol facts with flashcards.
Domain Practice
Focus exclusively on one exam domain to target your weakest area.
50-Question Set
Mid-length practice set covering all domains.
Full-length Simulation
Full exam simulation matching the real question count.
Exam guide
Start with a short practice session, review each missed answer, then return to the topics that caused mistakes.
Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.
IaaS, PaaS and SaaS responsibilities and examples.
Public, private, hybrid and community cloud deployment models.
On-premises vs cloud trade-offs: cost, control, scalability.
How cloud connectivity options (VPN, Direct Connect, ExpressRoute) work.
Related practice questions
Use these internal links to move from the exam guide into focused topic practice pages.
Practise PCNE questions linked to Designing, planning, and prototyping a GCP network.
Practise PCNE questions linked to Implementing hybrid interconnectivity.
Practise PCNE questions linked to Configuring network services.
Practise PCNE questions linked to Implementing network security.
Practise PCNE questions linked to Implementing a Virtual Private Cloud.
Practise PCNE questions linked to PCNE fundamentals.
Practise PCNE questions linked to PCNE scenario.
Practise PCNE questions linked to PCNE troubleshooting.
Practice directory
Every practice set is a unique selection of questions — numbered tests, domain-focused sessions, and topic-specific quizzes.
Showing 30 of 36 tests. See all 36 PCNE practice tests →
Timed mode
Official blueprint
Target weak areas by practising questions from a single domain. Each domain page shows all questions, difficulty breakdown, and a focused practice session.
Practise PCNE questions in this domain →
Practise PCNE questions in this domain →
Practise PCNE questions in this domain →
Practise PCNE questions in this domain →
Practise PCNE questions in this domain →
Free study guide
The Courseiva PCNE study guide covers exam format, the official domain blueprint with weights, a structured study plan, and domain-specific tips for each section. Use it alongside practice questions to build both conceptual depth and exam confidence.
Sample questions
Select your answer before revealing the explanation. These questions are original exam-style — not copied from any exam or dump site.
Trap 1: Cloud NAT
Cloud NAT provides internet access for private instances, not VPN routing.
Trap 2: VPC peering
VPC peering connects two VPCs, not on-premises to VPC.
Trap 3: VPC Flow Logs
Flow Logs record traffic metadata, not routing.
Cloud NAT
Why wrong: Cloud NAT provides internet access for private instances, not VPN routing.
VPC peering
Why wrong: VPC peering connects two VPCs, not on-premises to VPC.
Cloud Router
Cloud Router manages BGP sessions for dynamic routing with VPN or Interconnect.
VPC Flow Logs
Why wrong: Flow Logs record traffic metadata, not routing.
Trap 1: Create a forwarding zone in Cloud DNS and associate it with the VPC.
Forwarding zones resolve from GCP to other DNS servers; inbound server policy is needed for the reverse direction (GCP querying on-prem).
Trap 2: Enable Private Google Access on the VPC subnet.
Private Google Access allows instances to reach Google APIs and services, not on-premises DNS.
Trap 3: Configure Cloud NAT to forward DNS queries to on-premises DNS…
Cloud NAT does not support DNS forwarding; it provides outbound internet connectivity.
Use Cloud DNS inbound server policy to forward queries to on-premises DNS.
Cloud DNS inbound server policy enables DNS queries from GCP to be forwarded to on-premises DNS servers via VPN or Interconnect.
Create a forwarding zone in Cloud DNS and associate it with the VPC.
Why wrong: Forwarding zones resolve from GCP to other DNS servers; inbound server policy is needed for the reverse direction (GCP querying on-prem).
Enable Private Google Access on the VPC subnet.
Why wrong: Private Google Access allows instances to reach Google APIs and services, not on-premises DNS.
Configure Cloud NAT to forward DNS queries to on-premises DNS servers.
Why wrong: Cloud NAT does not support DNS forwarding; it provides outbound internet connectivity.
Trap 1: 10.0.0.1
Private IPs are not allowed for BGP over Cloud VPN; must use 169.254.x.x.
Trap 2: The tunnel's external IP address
The tunnel's external IP is used for the VPN, not for BGP peering.
Trap 3: The on-premises router's external IP address
External IPs are not used for BGP; BGP uses link-local addresses for the VPN.
169.254.0.1
Google requires BGP peer IPs to be in the 169.254.0.0/16 range for Cloud VPN tunnels.
10.0.0.1
Why wrong: Private IPs are not allowed for BGP over Cloud VPN; must use 169.254.x.x.
The tunnel's external IP address
Why wrong: The tunnel's external IP is used for the VPN, not for BGP peering.
The on-premises router's external IP address
Why wrong: External IPs are not used for BGP; BGP uses link-local addresses for the VPN.
Trap 1: Missing default route to Internet gateway
Default VPC has a default route.
Trap 2: Cloud NAT not configured in the correct region
Cloud NAT is regional; VMs in us-central1-a are in the same region.
Trap 3: Firewall rule blocking egress traffic from VM
Default VPC allows egress; no evidence of custom rules.
Missing default route to Internet gateway
Why wrong: Default VPC has a default route.
Port exhaustion due to insufficient NAT IP addresses
A single NAT IP provides limited ports; many VMs can exhaust them.
Cloud NAT not configured in the correct region
Why wrong: Cloud NAT is regional; VMs in us-central1-a are in the same region.
Firewall rule blocking egress traffic from VM
Why wrong: Default VPC allows egress; no evidence of custom rules.
Drag a concept onto its matching description — or click a concept then click the description.
Regional IP range within a VPC
Connection between two VPCs for private IP communication
VPC from one project shared with other projects
Outbound internet access for private instances
Access Google APIs from on-premises or other clouds
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Official booking and top-rated study resources for the PCNE.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.