ข้อ 1
What is a VPC in Google Cloud?
A VPC is a global virtual network that contains subnets, routes, and firewalls. VMs, buckets, and DNS records are resources inside it.
ข้อ 2
What is a subnet?
Subnets are IP ranges within a VPC. Cables, firewalls, and load balancers are different.
ข้อ 3
What is a VPC firewall rule?
Firewall rules allow or deny traffic based on source, destination, ports, and protocols. Buckets, DNS records, and machine types are different.
ข้อ 4
What is VPC peering?
VPC peering connects two VPC networks. Subnets, DNS zones, and billing are different.
ข้อ 5
What is Shared VPC?
Shared VPC centralizes network administration by sharing subnets. Public networks, DNS, and backups are different.
ข้อ 6
What is a route in a VPC?
Routes define where traffic is forwarded. Containers, firewalls, and DNS records are different.
ข้อ 7
What is a static route?
Static routes are manually configured. Learned routes come from BGP, and DNS or firewalls are different.
ข้อ 8
What is a dynamic route?
Dynamic routes are exchanged through BGP. Static routes are manual, and DNS records are different.
ข้อ 9
What is an IP address?
IP addresses identify resources on a network. Hardware serials, passwords, and cables are different.
ข้อ 10
Match each VPC concept to its purpose.
VPC is a virtual network, subnets are IP ranges, firewall rules filter traffic, and peering connects VPCs.
ข้อ 11
Which Google Cloud service distributes traffic across instances?
Cloud Load Balancing distributes traffic. DNS resolves names, NAT provides outbound access, and Interconnect is connectivity.
ข้อ 12
What is a backend service?
Backend services define backend groups and health checks. Firewall rules, DNS zones, and buckets are different.
ข้อ 13
What is a health check?
Health checks verify backend readiness. DNS records, firewalls, and load balancers are different.
ข้อ 14
What is a forwarding rule?
Forwarding rules route traffic to targets. DNS records, subnets, and firewalls are different.
ข้อ 15
What is a target pool?
Target pools group instances for load balancing. Firewall rules, DNS zones, and buckets are different.
ข้อ 16
What is a URL map?
URL maps route HTTP traffic by path and host. DNS records, firewalls, and subnets are different.
ข้อ 17
What is session affinity?
Session affinity keeps client sessions on the same backend. Firewall rules, DNS zones, and tests are different.
ข้อ 18
What is a global load balancer?
Global load balancers route across regions. Regional balancers stay in one region, and DNS or firewalls are different.
ข้อ 19
What is a regional load balancer?
Regional load balancers serve traffic within a single region. Global balancers span regions, and DNS or firewalls are different.
ข้อ 20
Match each load balancing concept to its purpose.
Health checks verify, forwarding rules route, URL maps route HTTP, and session affinity keeps clients on one backend.
ข้อ 21
Which Google Cloud service protects web applications with WAF rules?
Cloud Armor provides WAF and DDoS protection. CDN caches content, DNS resolves names, and NAT provides outbound access.
ข้อ 22
What is Identity-Aware Proxy?
IAP uses identity and context to control access. Firewalls, DNS records, and load balancers are different.
ข้อ 23
What is Private Google Access?
Private Google Access lets VMs reach Google APIs without public IPs. Public IPs, DNS records, and firewalls are different.
ข้อ 24
What is Cloud NAT?
Cloud NAT gives private instances outbound internet access. Load balancers, DNS servers, and firewalls are different.
ข้อ 25
What is VPC Service Controls?
VPC Service Controls creates security perimeters. Firewall rules, DNS zones, and load balancers are different.
ข้อ 26
What is packet mirroring?
Packet mirroring copies traffic for security tools. Blocking, DNS resolution, and IP assignment are different.
ข้อ 27
What is a firewall policy?
Firewall policies apply rules across the hierarchy. DNS records, subnets, and load balancers are different.
ข้อ 28
What is a security policy in Cloud Armor?
Security policies contain WAF rules. Firewall rules, DNS zones, and load balancers are different.
ข้อ 29
What is encryption in transit?
TLS protects data in transit. At-rest encryption protects files, masking hides values, and backups copy data.
ข้อ 30
Match each network security concept to its purpose.
Armor protects web apps, IAP controls identity access, NAT provides outbound access, and Service Controls creates perimeters.
ข้อ 31
What is Cloud VPN?
Cloud VPN creates encrypted tunnels over the internet. Load balancers, DNS servers, and firewalls are different.
ข้อ 32
What is Cloud Interconnect?
Interconnect provides private physical connectivity. VPN uses the internet, and DNS or firewalls are different.
ข้อ 33
What is Dedicated Interconnect?
Dedicated Interconnect provides direct physical links. VPN tunnels, DNS zones, and load balancers are different.
ข้อ 34
What is Partner Interconnect?
Partner Interconnect uses partner providers for private connectivity. Public internet, DNS records, and firewalls are different.
ข้อ 35
What is Cloud Router?
Cloud Router dynamically exchanges routes with on-premises via BGP. Physical routers, DNS servers, and firewalls are different.
ข้อ 36
What is BGP?
BGP exchanges routes between networks. DNS, storage, and firewall are different.
ข้อ 37
What is peering?
Peering connects networks directly. VPN tunnels, DNS records, and load balancers are different.
ข้อ 38
What is Network Connectivity Center?
Network Connectivity Center manages connectivity hubs. DNS servers, firewalls, and buckets are different.
ข้อ 39
What is a hybrid network?
Hybrid networks connect on-premises and cloud. Public-only, private-only, and local LANs are not hybrid.
ข้อ 40
Match each hybrid connectivity service to its purpose.
VPN creates tunnels, Interconnect provides private connections, Cloud Router exchanges routes, and BGP is the protocol.
ข้อ 41
What are VPC Flow Logs?
Flow Logs capture traffic metadata. Application logs, DNS records, and backups are different.
ข้อ 42
What is packet capture?
Packet capture records traffic for inspection. Blocking, DNS resolution, and IP assignment are different.
ข้อ 43
Which Google Cloud service collects network metrics?
Cloud Monitoring collects metrics and alerts. DNS resolves names, Storage stores data, and CDN caches content.
ข้อ 44
Which Google Cloud service stores network logs?
Cloud Logging stores and queries logs. DNS, NAT, and Armor are networking services, not log storage.
ข้อ 45
What is an uptime check?
Uptime checks verify endpoints from multiple locations. Firewall rules, DNS records, and load balancers are different.
ข้อ 46
What is traceroute used for?
Traceroute shows the packet path. DNS resolution, IP assignment, and filtering are different.
ข้อ 47
What is ping used for?
Ping tests reachability. DNS resolves, routers forward, and encryption protects.
ข้อ 48
What is a latency test?
Latency tests measure delay. Firewall rules, DNS records, and backups are different.
ข้อ 49
What is network intelligence?
Network intelligence provides diagnostics and insights. Firewalls, DNS zones, and load balancers are different.
ข้อ 50
Match each observability tool to its purpose.
Flow Logs capture metadata, Monitoring collects metrics, traceroute shows paths, and packet capture records traffic.
ข้อ 51
What is network optimization?
Optimization improves performance and cost. Deleting routes, disabling monitoring, or increasing latency are not optimization.
ข้อ 52
What is Cloud CDN?
Cloud CDN caches content at edge locations. DNS servers, firewalls, and load balancers are different.
ข้อ 53
What is a cache?
Caches store content for fast delivery. Firewall rules, DNS records, and routes are different.
ข้อ 54
What is a cache hit?
Cache hits serve content from cache. Misses fetch origin, and DNS or firewall events are different.
ข้อ 55
What is bandwidth?
Bandwidth measures capacity. Latency measures delay, and routes or DNS records are different.
ข้อ 56
What is latency?
Latency measures delay. Capacity is bandwidth, and DNS records or firewall rules are different.
ข้อ 57
What is a quota?
Quotas limit resources. DNS records, firewall rules, and load balancers are different.
ข้อ 58
What is cost optimization in networking?
Cost optimization balances spend and performance. Deleting resources, disabling monitoring, or increasing latency are not optimization.
ข้อ 59
What is a premium tier network?
Premium tier routes traffic over Google backbone for lower latency. Basic tier, DNS zones, and firewalls are different.
ข้อ 60
Match each optimization concept to its purpose.
Cloud CDN delivers content, caches store fast, latency is delay, and quotas limit resources.