Your company's cloud network has hybrid connectivity to an on-premises environment through Cloud Interconnect in two regions (us-east4 and us-west1). You received complaints that some on-premises destinations are no longer reachable from us-east4, after changes were made to advertise additional routes to us-west1. You need to troubleshoot to see if any routes were dropped. What should you do?

• A. Query the dynamic_routes/learned_routes/dropped_unique_destinations metric and review the global routing_mode metric attribute.
• B. Query the dynamic_routes/learned_routes/unique_destinations_limit metric and review the global routing_mode metric attribute.
• C. Query the dynamic_routes/learned_routes/dropped_unique_destinations metric and review the regional routing_mode metric attribute.
• D. Query the dynamic_routes/learned_routes/any_dropped_unique_destinations metric and review the regional routing_mode metric attribute.

Explanation: Only visible for 2Pass4sure members. You can sign-up / login (it's free).

Your software team is developing an on-premises web application that requires direct connectivity to Compute Engine Instances in GCP using the RFC 1918 address space.
You want to choose a connectivity solution from your on-premises environment to GCP, given these specifications:
- Your ISP is a Google Partner Interconnect provider.
- Your on-premises VPN device's internet uplink and downlink speeds are
10 Gbps.
- A test VPN connection between your on-premises gateway and GCP is
performing at a maximum speed of 500 Mbps due to packet losses.
- Most of the data transfer will be from GCP to the on-premises
environment.
- The application can burst up to 1.5 Gbps during peak transfers over
the Interconnect.
- Cost and the complexity of the solution should be minimal.
How should you provision the connectivity solution?

• A. Use network compression over your VPN to increase the amount of data you can send over your VPN.
• B. Provision a Dedicated Interconnect instead of a VPN.
• C. Create multiple VPN tunnels to account for the packet losses, and increase bandwidth using ECMP.
• D. Provision a Partner Interconnect through your ISP.

Explanation: Only visible for 2Pass4sure members. You can sign-up / login (it's free).

You are designing an IP address scheme for new private Google Kubernetes Engine (GKE) clusters. Due to IP address exhaustion of the RFC 1918 address space in your enterprise, you plan to use privately used public IP space for the new clusters. You want to follow Google- recommended practices. What should you do after designing your IP scheme?

• A. Create privately used public IP primary and secondary subnet ranges for the clusters. Create a private GKE cluster with the following options selected: --disable-default-snat, --enable-ip-alias, and --enable-private-nodes.
• B. Create the minimum usable RFC 1918 primary and secondary subnet IP ranges for the clusters.
  Re-use the secondary address range for the pods across multiple private GKE clusters.
• C. Create privately used public IP primary and secondary subnet ranges for the clusters. Create a private GKE cluster with the following options selected: --enable-ip-alias and --enable-private- nodes.
• D. Create the minimum usable RFC 1918 primary and secondary subnet IP ranges for the clusters, Re-use the secondary address range for the services across multiple private GKE clusters.

Explanation: Only visible for 2Pass4sure members. You can sign-up / login (it's free).

You created a new VPC network named Dev with a single subnet. You added a firewall rule for the network Dev to allow HTTP traffic only and enabled logging. When you try to log in to an instance in the subnet via Remote Desktop Protocol, the login fails. You look for the Firewall rules logs in Stackdriver Logging, but you do not see any entries for blocked traffic. You want to see the logs for blocked traffic.
What should you do?

• A. Create a new firewall rule to allow traffic from port 22, and enable logs.
• B. Check the VPC flow logs for the instance.
• C. Create a new firewall rule with priority 65500 to deny all traffic, and enable logs.
• D. Try connecting to the instance via SSH, and check the logs.

Explanation: Only visible for 2Pass4sure members. You can sign-up / login (it's free).

Your organization has a web-based application that is going to be migrated to Google Cloud from an on-premises environment. You need to set up Cloud CDN for the application migration. The application previously used a different CDN provider and is configured to respond with Cache- Control headers. You want to keep this configuration. What should you do?

• A. Configure USE_ORIGIN_HEADERS to honor the cache headers delivered by the origin.
• B. Don't configure Cloud CDN at all since the backend is already configured for caching.
• C. Use the automatic caching mechanism in Cloud CDN by configuring CACHE_ALL_STATIC cache mode.
• D. Migrate the website to a Cloud Storage bucket, and use its built-in caching.

Explanation: Only visible for 2Pass4sure members. You can sign-up / login (it's free).