You have a web application that is currently hosted in the us-central1 region. Users experience high latency when traveling in Asia. You've configured a network load balancer, but users have not experienced a performance improvement. You want to decrease the latency.
What should you do?

1. A. Configure a policy-based route rule to prioritize the traffic.
2. B. Configure an HTTP load balancer, and direct the traffic to it.
3. C. Configure Dynamic Routing for the subnet hosting the application.
4. D. Configure the TTL for the DNS zone to decrease the time between updates.

Correct Answer: B

You have provisioned a Partner Interconnect connection to extend connectivity from your on-premises data center to Google Cloud. You need to configure a Cloud Router and create a VLAN attachment to connect to resources inside your VPC. You need to configure an Autonomous System number (ASN) to use with the associated Cloud Router and create the VLAN attachment.
What should you do?

1. A. Use a 4-byte private ASN 4200000000-4294967294.
2. B. Use a 2-byte private ASN 64512-65535.
3. C. Use a public Google ASN 15169.
4. D. Use a public Google ASN 16550.

Correct Answer: B

You create a Google Kubernetes Engine private cluster and want to use kubectl to get the status of the pods. In one of your instances you notice the master is not responding, even though the cluster is up and running.
What should you do to solve the problem?

1. A. Assign a public IP address to the instance.
2. B. Create a route to reach the Master, pointing to the default internet gateway.
3. C. Create the appropriate firewall policy in the VPC to allow traffic from Master node IP address to the instance.
4. D. Create the appropriate master authorized network entries to allow the instance to communicate to the master.

Correct Answer: D
https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters#cant_reach_cluster https://cloud.google.com/kubernetes-engine/docs/how-to/authorized-networks

You deployed a hub-and-spoke architecture in your Google Cloud environment that uses VPC Network Peering to connect the spokes to the hub. For security reasons, you deployed a private Google Kubernetes
Engine (GKE) cluster in one of the spoke projects with a private endpoint for the control plane. You configured authorized networks to be the subnet range where the GKE nodes are deployed. When you attempt to reach the GKE control plane from a different spoke project, you cannot access it. You need to allow access to the GKE control plane from the other spoke projects. What should you do?

1. A. Add a firewall rule that allows port 443 from the other spoke projects.
2. B. Enable Private Google Access on the subnet where the GKE nodes are deployed.
3. C. Configure the authorized networks to be the subnet ranges of the other spoke projects.
4. D. Deploy a proxy in the spoke project where the GKE nodes are deployed and connect to the control plane through the proxy.

Correct Answer: C

You are configuring your Google Cloud environment to connect to your on-premises network. Your configuration must be able to reach Cloud Storage APIs and your Google Kubernetes Engine nodes across your private Cloud Interconnect network. You have already configured a Cloud Router with your Interconnect VLAN attachments. You now need to set up the appropriate router advertisement configuration on the Cloud Router. What should you do?

1. A. Configure the route advertisement to the default setting.
2. B. On the on-premises router, configure a static route for the storage API virtual IP address which points to the Cloud Router's link-local IP address.
3. C. Configure the route advertisement to the custom setting, and manually add prefix 199.36.153.8/30 to the list of advertisement
4. D. Leave all other options as their default settings.
5. E. Configure the route advertisement to the custom setting, and manually add prefix 199.36.153.8/30 to the list of advertisement
6. F. Advertise all visible subnets to the Cloud Router.

Correct Answer: C