Practice 60 original Google Cloud Network Engineer questions covering VPC, load balancing, security, hybrid, observability, and optimization, with detailed explanations.
Level: Google Cloud Network EngineerDifficulty: advanced60 questions60 min
Choose a practice mode, answer each GCP Network Engineer question, then review the explanation. Wrong answers are saved locally for review.
Day streak: 0 daysSaved only on this device
Progress0 / 60
Time left: 00:00
No wrong answers saved yet.
No questions match your filters.
Question 1
What is a VPC in Google Cloud?
A VPC is a global virtual network that contains subnets, routes, and firewalls. VMs, buckets, and DNS records are resources inside it.
Question 2
What is a subnet?
Subnets are IP ranges within a VPC. Cables, firewalls, and load balancers are different.
Question 3
What is a VPC firewall rule?
Firewall rules allow or deny traffic based on source, destination, ports, and protocols. Buckets, DNS records, and machine types are different.
Question 4
What is VPC peering?
VPC peering connects two VPC networks. Subnets, DNS zones, and billing are different.
Question 5
What is Shared VPC?
Shared VPC centralizes network administration by sharing subnets. Public networks, DNS, and backups are different.
Question 6
What is a route in a VPC?
Routes define where traffic is forwarded. Containers, firewalls, and DNS records are different.
Question 7
What is a static route?
Static routes are manually configured. Learned routes come from BGP, and DNS or firewalls are different.
Question 8
What is a dynamic route?
Dynamic routes are exchanged through BGP. Static routes are manual, and DNS records are different.
Question 9
What is an IP address?
IP addresses identify resources on a network. Hardware serials, passwords, and cables are different.
Question 10
Match each VPC concept to its purpose.
VPC is a virtual network, subnets are IP ranges, firewall rules filter traffic, and peering connects VPCs.
Question 11
Which Google Cloud service distributes traffic across instances?
Cloud Load Balancing distributes traffic. DNS resolves names, NAT provides outbound access, and Interconnect is connectivity.
Question 12
What is a backend service?
Backend services define backend groups and health checks. Firewall rules, DNS zones, and buckets are different.
Question 13
What is a health check?
Health checks verify backend readiness. DNS records, firewalls, and load balancers are different.
Question 14
What is a forwarding rule?
Forwarding rules route traffic to targets. DNS records, subnets, and firewalls are different.
Question 15
What is a target pool?
Target pools group instances for load balancing. Firewall rules, DNS zones, and buckets are different.
Question 16
What is a URL map?
URL maps route HTTP traffic by path and host. DNS records, firewalls, and subnets are different.
Question 17
What is session affinity?
Session affinity keeps client sessions on the same backend. Firewall rules, DNS zones, and tests are different.
Question 18
What is a global load balancer?
Global load balancers route across regions. Regional balancers stay in one region, and DNS or firewalls are different.
Question 19
What is a regional load balancer?
Regional load balancers serve traffic within a single region. Global balancers span regions, and DNS or firewalls are different.
Question 20
Match each load balancing concept to its purpose.
Health checks verify, forwarding rules route, URL maps route HTTP, and session affinity keeps clients on one backend.
Question 21
Which Google Cloud service protects web applications with WAF rules?
Cloud Armor provides WAF and DDoS protection. CDN caches content, DNS resolves names, and NAT provides outbound access.
Question 22
What is Identity-Aware Proxy?
IAP uses identity and context to control access. Firewalls, DNS records, and load balancers are different.
Question 23
What is Private Google Access?
Private Google Access lets VMs reach Google APIs without public IPs. Public IPs, DNS records, and firewalls are different.
Question 24
What is Cloud NAT?
Cloud NAT gives private instances outbound internet access. Load balancers, DNS servers, and firewalls are different.
Question 25
What is VPC Service Controls?
VPC Service Controls creates security perimeters. Firewall rules, DNS zones, and load balancers are different.
Question 26
What is packet mirroring?
Packet mirroring copies traffic for security tools. Blocking, DNS resolution, and IP assignment are different.
Question 27
What is a firewall policy?
Firewall policies apply rules across the hierarchy. DNS records, subnets, and load balancers are different.
Question 28
What is a security policy in Cloud Armor?
Security policies contain WAF rules. Firewall rules, DNS zones, and load balancers are different.
Question 29
What is encryption in transit?
TLS protects data in transit. At-rest encryption protects files, masking hides values, and backups copy data.
Question 30
Match each network security concept to its purpose.
Armor protects web apps, IAP controls identity access, NAT provides outbound access, and Service Controls creates perimeters.
Question 31
What is Cloud VPN?
Cloud VPN creates encrypted tunnels over the internet. Load balancers, DNS servers, and firewalls are different.
Question 32
What is Cloud Interconnect?
Interconnect provides private physical connectivity. VPN uses the internet, and DNS or firewalls are different.
Question 33
What is Dedicated Interconnect?
Dedicated Interconnect provides direct physical links. VPN tunnels, DNS zones, and load balancers are different.
Question 34
What is Partner Interconnect?
Partner Interconnect uses partner providers for private connectivity. Public internet, DNS records, and firewalls are different.
Question 35
What is Cloud Router?
Cloud Router dynamically exchanges routes with on-premises via BGP. Physical routers, DNS servers, and firewalls are different.
Question 36
What is BGP?
BGP exchanges routes between networks. DNS, storage, and firewall are different.
Question 37
What is peering?
Peering connects networks directly. VPN tunnels, DNS records, and load balancers are different.
Question 38
What is Network Connectivity Center?
Network Connectivity Center manages connectivity hubs. DNS servers, firewalls, and buckets are different.
Question 39
What is a hybrid network?
Hybrid networks connect on-premises and cloud. Public-only, private-only, and local LANs are not hybrid.
Question 40
Match each hybrid connectivity service to its purpose.
VPN creates tunnels, Interconnect provides private connections, Cloud Router exchanges routes, and BGP is the protocol.
Question 41
What are VPC Flow Logs?
Flow Logs capture traffic metadata. Application logs, DNS records, and backups are different.
Question 42
What is packet capture?
Packet capture records traffic for inspection. Blocking, DNS resolution, and IP assignment are different.
Question 43
Which Google Cloud service collects network metrics?
Cloud Monitoring collects metrics and alerts. DNS resolves names, Storage stores data, and CDN caches content.
Question 44
Which Google Cloud service stores network logs?
Cloud Logging stores and queries logs. DNS, NAT, and Armor are networking services, not log storage.
Question 45
What is an uptime check?
Uptime checks verify endpoints from multiple locations. Firewall rules, DNS records, and load balancers are different.
Question 46
What is traceroute used for?
Traceroute shows the packet path. DNS resolution, IP assignment, and filtering are different.
Question 47
What is ping used for?
Ping tests reachability. DNS resolves, routers forward, and encryption protects.
Question 48
What is a latency test?
Latency tests measure delay. Firewall rules, DNS records, and backups are different.
Question 49
What is network intelligence?
Network intelligence provides diagnostics and insights. Firewalls, DNS zones, and load balancers are different.
Question 50
Match each observability tool to its purpose.
Flow Logs capture metadata, Monitoring collects metrics, traceroute shows paths, and packet capture records traffic.
Question 51
What is network optimization?
Optimization improves performance and cost. Deleting routes, disabling monitoring, or increasing latency are not optimization.
Question 52
What is Cloud CDN?
Cloud CDN caches content at edge locations. DNS servers, firewalls, and load balancers are different.
Question 53
What is a cache?
Caches store content for fast delivery. Firewall rules, DNS records, and routes are different.
Question 54
What is a cache hit?
Cache hits serve content from cache. Misses fetch origin, and DNS or firewall events are different.
Question 55
What is bandwidth?
Bandwidth measures capacity. Latency measures delay, and routes or DNS records are different.
Question 56
What is latency?
Latency measures delay. Capacity is bandwidth, and DNS records or firewall rules are different.
Question 57
What is a quota?
Quotas limit resources. DNS records, firewall rules, and load balancers are different.
Question 58
What is cost optimization in networking?
Cost optimization balances spend and performance. Deleting resources, disabling monitoring, or increasing latency are not optimization.
Question 59
What is a premium tier network?
Premium tier routes traffic over Google backbone for lower latency. Basic tier, DNS zones, and firewalls are different.
Question 60
Match each optimization concept to its purpose.
Cloud CDN delivers content, caches store fast, latency is delay, and quotas limit resources.