Practice Test 1 | Google Cloud Certified Professional Cloud Network Engineer | Dumps | Mock Test
You work as the network engineer for an automobile company. The company has a total of six VPCs with one subnet each. The company has decided to use a virtual security appliance deployed in a security VPC (subnet-security) to secure the resources in other four VPCs and inspect all egress traffic.
Which of the following will create the correct configuration?
A. Create the security appliance using the gcloud command
gcloud compute instances create security-appliance \
–network-interface subnet=subnet-security, no-address\
–network-interface subnet=subnet-1,no-address \
–network-interface subnet=subnet-2,no-address \
–network-interface subnet=subnet-3,no-address \
–network-interface subnet=subnet-4,no-address \
–machine-type=n1-standard-4
B. Create the security appliance using the gcloud command
gcloud compute instances create security-appliance \
–network-interface subnet=subnet-security \
–network-interface subnet=subnet-1,no-address \
–network-interface subnet=subnet-2,no-address \
–network-interface subnet=subnet-3 \
–network-interface subnet=subnet-4,no-address \
–machine-type=n1-standard-4
C. Create the security appliance using the gcloud command
gcloud compute instances create security-appliance \
–network-interface subnet=subnet-security ,address=’reserved-address’\
–network-interface subnet=subnet-1,no-address \
–network-interface subnet=subnet-2,no-address \
–network-interface subnet=subnet-3,no-address \
–network-interface subnet=subnet-4,no-address \
–machine-type=n1-standard-4
D. Create the security appliance using the gcloud command
gcloud compute instances create security-appliance \
–network-interface subnet=subnet-security \
–network-interface subnet=subnet-1,no-address \
–network-interface subnet=subnet-2,no-address \
–network-interface subnet=subnet-3,no-address \
–network-interface subnet=subnet-4,no-address \
–machine-type=n1-standard-4
E. Create the security appliance using the gcloud command
gcloud compute instances create security-appliance \
–network-interface subnet=subnet-security \
–network-interface subnet=subnet-1,no-address \
–network-interface subnet=subnet-2,no-address \
–network-interface subnet=subnet-3,no-address \
–network-interface subnet=subnet-4 \
–machine-type=n1-standard-4
Correct Answers: C and D
- Option A is incorrect because all the network interfaces created have the “no-address” option which means they do not have an external IP address. The security appliance will also not be able to connect to the internet.
- Option B is incorrect. The NIC in the subnet 3 (VPC 3) also has an external one which means it will have direct internet access. This does not satisfy the requirement.
- Option C is correct. Only the NIC in the security VPC has an external IP which is a reserved IP, the NICs in the other 4 VPCs attached do not have an external IP.
- Option D is correct. Only the NIC in the security VPC has an external IP (it does not have the “no-address option”), the NICs in the other 4 VPCs attached do not have an external IP.
- Option E is incorrect The NIC in the subnet 4 (VPC 4) also has an external which means it will have direct internet access. This does not satisfy the requirement.
Reference:
Comments are closed, but trackbacks and pingbacks are open.