GCP VPC Configuration Quiz for ACE

1. Which IP address type is used for communication within a VPC but not exposed to the internet?

External IP

Ephemeral IP

Internal IP

Reserved IP

2. In GCP VPC, what is the default behavior for traffic between instances in the same subnet?

Automatically blocked by default

Allowed if firewall rules permit

Requires explicit route configuration

Only allowed within the same zone

3. What does alias IP allow you to do?

Assign multiple IP ranges to a single network interface

Hide your actual IP address

Create redundant network paths

Isolate subnets within a VPC

4. Which GCP resource is used to define a set of firewall rules that apply to instances with specific network tags?

Network policy

Service account

Firewall rule with target tags

Security group

5. What is the function of a Cloud NAT gateway?

To provide external IP addresses to instances

To enable outbound connectivity from instances without external IPs

To block all ingress traffic

To distribute traffic across instances

6. In GCP, what does a network policy control?

IP address allocation

Traffic flow between pods in GKE clusters

Firewall rule enforcement

DNS name resolution

7. Which network service tier provides the best performance for latency-sensitive applications?

Standard

Premium

Enterprise

Dedicated

8. What is the purpose of Cloud VPN in GCP?

To encrypt all traffic within a VPC

To establish secure, encrypted tunnels between on-premises and GCP

To manage firewall rules automatically

To allocate IP addresses dynamically

9. Which feature allows you to reserve a static external IP address for an instance?

Ephemeral IP allocation

Static IP address reservation

Internal IP binding

Alias IP configuration

10. What does Cloud Armor protect against?

Network congestion

DDoS attacks and application-layer threats

Unauthorized subnet creation

DNS resolution failures

11. What is the scope of a VPC network in Google Cloud?

Limited to a single zone

Global across all regions

Restricted to one region only

Confined to a single project

12. What is the maximum transmission unit (MTU) for traffic within a GCP VPC?

512 bytes

1460 bytes

1500 bytes

9000 bytes

13. Which GCP service provides a private connection to Google Cloud services without using the public internet?

Cloud VPN

Private Google Access

Cloud Interconnect

Cloud CDN

14. What is Shared VPC used for?

To share a VPC network across multiple projects in an organization

To replicate a VPC across regions

To create redundant network paths

To isolate subnets within a single VPC

15. Which networking option allows private communication between two VPCs in different projects?

VPC Peering

Shared VPC

Cloud Interconnect

VPN tunnels only

16. What does a route in GCP determine?

Which firewall rules apply to traffic

The next hop for packets destined to a destination CIDR range

The encryption protocol for data transfer

The priority of network traffic

17. Which firewall rule direction allows traffic from external sources to your instances?

Egress

Ingress

Internal

Bidirectional

18. What is the purpose of a firewall rule in a GCP VPC?

To allocate IP addresses to instances

To control ingress and egress traffic between resources

To monitor network bandwidth usage

To encrypt data in transit

19. In GCP, what does the default VPC network provide?

One subnet per zone with a /20 CIDR block

Complete isolation from other projects

Automatic connectivity to on-premises networks

Built-in load balancing for all instances

20. Which of the following is a primary characteristic of subnets in a GCP VPC?

They must span multiple regions

They are regional resources with a CIDR range

They are automatically created for each zone

They cannot overlap with other subnets

Google Associate Cloud Engineer VPC Configuration Quiz