You created a new VPC for your development team. You want to allow access to the resources in this VPC via SSH only.
How should you configure your firewall rules?

• A.Create a single firewall rule to allow port 3389 with priority 1000.
• B.Create two firewall rules: one to block all traffic with priority 65536, and another to allow port 3389 with priority 1000.
• C.Create a single firewall rule to allow port 22 with priority 1000.
• D.Create two firewall rules: one to block all traffic with priority 0, and another to allow port 22 with priority 1000.

Comment: *

Name: *

Email: *

Verification: *

You work for a multinational enterprise that is moving to GCP.
These are the cloud requirements:
* An on-premises data center located in the United States in Oregon and New York with Dedicated Interconnects connected to Cloud regions us-west1 (primary HQ) and us-east4 (backup)
* Multiple regional offices in Europe and APAC
* Regional data processing is required in europe-west1 and australia-southeast1
* Centralized Network Administration Team
Your security and compliance team requires a virtual inline security appliance to perform L7 inspection for URL filtering. You want to deploy the appliance in us-west1.
What should you do?

• A.* Create 2 VPCs in a Shared VPC Host Project.* Configure a 2-NIC instance in zone us-west1-a in the Host Project.* Attach NIC0 in VPC #1 us-west1 subnet of the Host Project.* Attach NIC1 in VPC #2 us-west1 subnet of the Host Project.* Deploy the instance.* Configure the necessary routes and firewall rules to pass traffic through the instance.
• B.* Create 2 VPCs in a Shared VPC Host Project.* Configure a 2-NIC instance in zone us-west1-a in the Service Project.* Attach NIC0 in VPC #1 us-west1 subnet of the Host Project.* Attach NIC1 in VPC #2 us-west1 subnet of the Host Project.* Deploy the instance.* Configure the necessary routes and firewall rules to pass traffic through the instance.
• C.* Create 1 VPC in a Shared VPC Host Project.* Configure a 2-NIC instance in zone us-west1-a in the Host Project.* Attach NIC0 in us-west1 subnet of the Host Project.* Attach NIC1 in us-west1 subnet of the Host Project* Deploy the instance.* Configure the necessary routes and firewall rules to pass traffic through the instance.
• D.* Create 1 VPC in a Shared VPC Service Project.* Configure a 2-NIC instance in zone us-west1-a in the Service Project.* Attach NIC0 in us-west1 subnet of the Service Project.* Attach NIC1 in us-west1 subnet of the Service Project* Deploy the instance.* Configure the necessary routes and firewall rules to pass traffic through the instance.

Comment: *

Name: *

Email: *

Verification: *

You are increasing your usage of Cloud VPN between on-premises and GCP, and you want to support more traffic than a single tunnel can handle. You want to increase the available bandwidth using Cloud VPN.
What should you do?

• A.Double the MTU on your on-premises VPN gateway from 1460 bytes to 2920 bytes.
• B.Create two VPN tunnels on the same Cloud VPN gateway that point to the same destination VPN gateway IP address.
• C.Add a second on-premises VPN gateway with a different public IP address.
  Create a second tunnel on the existing Cloud VPN gateway that forwards the same IP range, but points at the new on-premises gateway IP.
• D.Add a second Cloud VPN gateway in a different region than the existing VPN gateway.
  Create a new tunnel on the second Cloud VPN gateway that forwards the same IP range, but points to the existing on-premises VPN gateway IP address.

Comment: *

Name: *

Email: *

Verification: *

You are trying to update firewall rules in a shared VPC for which you have been assigned only Network Admin permissions. You cannot modify the firewall rules. Your organization requires using the least privilege necessary.
Which level of permissions should you request?

• A.Security Admin privileges from the Shared VPC Admin.
• B.Service Project Admin privileges from the Shared VPC Admin.
• C.Shared VPC Admin privileges from the Organization Admin.
• D.Organization Admin privileges from the Organization Admin.

Comment: *

Name: *

Email: *

Verification: *

You want to apply a new Cloud Armor policy to an application that is deployed in Google Kubernetes Engine (GKE). You want to find out which target to use for your Cloud Armor policy.
Which GKE resource should you use?

• A.GKE Node
• B.GKE Pod
• C.GKE Cluster
• D.GKE Ingress

Comment: *

Name: *

Email: *

Verification: *