Purchase Google : Professional-Cloud-Network-Engineer Exam Materials and then pass exam easily

You configured a single IPSec Cloud VPN tunnel for your organization to a third-party customer.
You confirmed that the VPN tunnel is established. However, the BGP session status states that the BGP is not configured. The customer has provided you with their BGP settings:
Local BGP address: 169.254.11.1/30
Local ASN: 64515
Peer BGP address: 169.254.11.2
Peer ASN: 64517
Base MED: 1000
MD5 Authentication: Disabled
You need to configure the local BGP session for this tunnel based on the settings provided by the customer. You already associated the Cloud Router with the Cloud VPN Tunnel. What settings should you use for the BGP session?

• A. Peer ASN: 64515
  Advertised Route Priority (MED): 100
  Local BGP IP: 169.254.11.2
  Peer BGP IP: 169.254.11.1
  MD5 Authentication: Disabled
• B. Peer ASN: 64515
  Advertised Route Priority (MED): 100
  Local BGP IP: 169.254.11.1
  Peer BGP IP: 169.254.11.2
  MD5 Authentication: Disabled
• C. Peer ASN: 64515
  Advertised Route Priority (MED): 1000
  Local BGP IP: 169.254.11.2
  Peer BGP IP: 169.254.11.1
  MD5 Authentication: Enabled
• D. Peer ASN: 64517
  Advertised Route Priority (MED): 100
  Local BGP IP: 169.254.11.2
  Peer BGP IP: 169.254.11.1
  MD5 Authentication: Disabled

You have the networking configuration shown in the diagram. Two VLAN attachments associated with two Dedicated Interconnect connections terminate on the same Cloud Router (mycloudrouter). The Interconnect connections terminate on two separate on-premises routers.
You advertise the same prefixes from the Border Gateway Protocol (BGP) sessions associated with each of the VLAN attachments.
You notice an asymmetric traffic flow between the two Interconnect connections. Which of the following actions should you take to troubleshoot the asymmetric traffic flow?

• A. From the Cloud CLI, run gcloud compute --project PROJECT_ID routers get-status mycloudrouter
  --region REGION and review the results.
• B. From the Cloud CLI, run gcloud compute routers describe mycloudrouter --region REGION and review the results.
• C. From the Google Cloud console, navigate to the Hybrid Connectivity, select the Cloud Router, and view BGP sessions.
• D. From the Google Cloud console, navigate to Cloud Logging to view VPC Flow Logs and review the results.

Your company deployed Cloud Next Generation Firewall Enterprise (Cloud NGFW Enterprise).
You have already created a CA pool and a CA in Certificate Authority Service. You need to enable TLS inspection. What should you do?

• A. Grant the network security service agent service account the privateca.certificateRequester role.
  Create a TLS inspection policy linking to the CA pool. Configure your VPC endpoint associations to use the TLS inspection policy. Flip the TLS inspection flag in your firewall policy rules to true.
• B. Grant the network security service agent service account the privateca.certificateRequester role.
  Create a trust config in Certificate Manager. Flip the TLS inspection flag in your firewall policy rules to true.
• C. Grant the network security service agent service account the privateca.poolReader role. Create a TLS inspection policy linking to the CA pool. Configure your VPC endpoint associations to use the TLS inspection policy. Flip the TLS inspection flag in your firewall policy rules to true.
• D. Grant the network security service agent service account the privateca.certificateRequester role.
  Create a trust config in Certificate Manager Flip the TLS inspection flag in your firewall policy rules to true.

Your organization requires its cloud network environment to inspect and deny traffic through a third party virtual firewall appliance. You currently operate a single standalone appliance, which is the next-hop target of a custom static route. You have recently deployed a new redundant appliance for high availability and load-sharing. You need to route the cloud network traffic through these appliances in an active/active configuration, while avoiding asymmetric routing.
You also need to deploy this configuration with minimal traffic disruption and follow Google- recommended practices. What should you do?

• A. Create routes for both appliances at the same priority, but higher than the existing standalone appliance's route. Then remove the pre-existing route that directed traffic to the standalone appliance.
• B. Configure an internal passthrough network load balancer to send traffic to the redundant appliance. Then configure a packet mirroring policy that mirrors all traffic from the pre-existing standalone appliance to the new redundant appliance.
• C. Create a route for the redundant appliance at the same priority as the pre-existing standalone appliance.
• D. Configure an internal passthrough network load balancer to balance traffic to both appliances.
  Create a route with this internal load balancer as a next hop at a higher priority than the existing route. Then remove the pre-existing route that directed traffic to the standalone appliance.

You are establishing a high-throughput, highly reliable, and private network link for a multinational corporation between its on-premises data center in Frankfurt. It is located within a Google- supported co-location facility, and its Google Cloud VPC in the europe-west3 region. You need a connection that supports large-scale data synchronization and real-time application traffic with a bandwidth of 10 Gbps or more. What should you do?

• A. Engage with a Google Cloud Partner to establish a Partner Interconnect connection for your private network.
• B. Configure a pair of HA VPN tunnels between the on-premises data center and the Google Cloud VPC.
• C. Order a pair of Dedicated Interconnect circuits at the colocation facility to a Google edge location, then configure a VLAN attachment within your Google Cloud VPC.
• D. Implement a Direct Peering connection from your co-location facility to Google's global network edge.