You are migrating a three-tier application architecture from on-premises to Google Cloud. As a first step in the migration, you want to create a new Virtual Private Cloud (VPC) with an external HTTP(S) load balancer. This load balancer will forward traffic back to the on-premises compute resources that run the presentation tier. You need to stop malicious traffic from entering your VPC and consuming resources at the edge, so you must configure this policy to filter IP addresses and stop cross-site scripting (XSS) attacks. What should you do?

ACreate a Google Cloud Armor policy, and apply it to a backend service that uses an unmanaged instance group backend.

BCreate a hierarchical firewall ruleset, and apply it to the VPC's parent organization resource node.

CCreate a Google Cloud Armor policy, and apply it to a backend service that uses an internet network endpoint group (NEG) backend.

DCreate a VPC firewall ruleset, and apply it to all instances in unmanaged instance groups.

1 answers

94 votes

984

Answer Link

You are migrating to Cloud DNS and want to import your BIND zone file.
Which command should you use?

Agcloud dns record-sets import ZONE_FILE --zone MANAGED_ZONE

Bgcloud dns record-sets import ZONE_FILE --replace-origin-ns --zone MANAGED_ZONE

Cgcloud dns record-sets import ZONE_FILE --zone-file-format --zone MANAGED_ZONE

Dgcloud dns record-sets import ZONE_FILE --delete-all-existing --zone MANAGED ZONE

1 answers

70 votes

961

Answer Link

You create multiple Compute Engine virtual machine instances to be used at TFTP servers.
Which type of load balancer should you use?

AHTTP(S) load balancer

BSSL proxy load balancer

CTCP proxy load balancer

DNetwork load balancer

1 answers

81 votes

1144

Answer Link

You are migrating a three-tier application architecture from on-premises to Google Cloud. As a first step in the migration, you want to create a new Virtual Private Cloud (VPC) with an external HTTP(S) load balancer. This load balancer will forward traffic back to the on-premises compute resources that run the presentation tier. You need to stop malicious traffic from entering your VPC and consuming resources at the edge, so you must configure this policy to filter IP addresses and stop cross-site scripting (XSS) attacks. What should you do?

ACreate a Google Cloud Armor policy, and apply it to a backend service that uses an unmanaged instance group backend.

BCreate a hierarchical firewall ruleset, and apply it to the VPC's parent organization resource node.

CCreate a Google Cloud Armor policy, and apply it to a backend service that uses an internet network endpoint group (NEG) backend.

DCreate a VPC firewall ruleset, and apply it to all instances in unmanaged instance groups.

1 answers

99 votes

1150

Answer Link

You are migrating to Cloud DNS and want to import your BIND zone file.
Which command should you use?

Agcloud dns record-sets import ZONE_FILE --zone MANAGED_ZONE

Bgcloud dns record-sets import ZONE_FILE --replace-origin-ns --zone MANAGED_ZONE

Cgcloud dns record-sets import ZONE_FILE --zone-file-format --zone MANAGED_ZONE

Dgcloud dns record-sets import ZONE_FILE --delete-all-existing --zone MANAGED ZONE

1 answers

82 votes

1403

Answer Link

Google Professional-Cloud-Network-Engineer Quiz:2 Topic:3 Questions:6-10

Free Practice Mock Questions Set 6-10 (Quiz # 2) for Google Professional-Cloud-Network-Engineer Exam, according to official Google Professional Cloud Network Engineer exam syllabus topic # 3

Quiz 1

Quiz 2

You are migrating to Cloud DNS and want to import your BIND zone file.Which command should you use?

You create multiple Compute Engine virtual machine instances to be used at TFTP servers.Which type of load balancer should you use?

You are migrating to Cloud DNS and want to import your BIND zone file.Which command should you use?

Google Professional-Cloud-Network-Engineer Quiz:2 Topic:3 Questions:6-10

You are migrating to Cloud DNS and want to import your BIND zone file.
Which command should you use?

You create multiple Compute Engine virtual machine instances to be used at TFTP servers.
Which type of load balancer should you use?

You are migrating to Cloud DNS and want to import your BIND zone file.
Which command should you use?