認定試験の出題内容は定期的に見直されるため、古い教材で対策するのは危険です。CertShikenのProfessional-Cloud-Network-Engineer問題集は購入後365日間無料で更新され、Google Cloud Certified - Professional Cloud Network Engineerの最新傾向に沿った236問を使い続けられます。

Google Professional-Cloud-Network-Engineer 試験概要:

認定ベンダー:	Google Cloud
試験名:	Professional Cloud Network Engineer
試験番号:	Professional-Cloud-Network-Engineer
出題数:	50～60問
合格点:	公表されていません
試験形式:	複数選択式, 択一選択式
対応言語:	日本語, 英語
受験料:	200米ドル（税別）
関連資格:	Google Cloud 認定資格 - Professional Cloud Architect Google Cloud 認定資格 - Associate Cloud Engineer
試験時間:	120 分
認定の有効期間:	2年間
推奨トレーニング:	公式試験ガイド Google Cloud トレーニングコース
受験申し込み:	Google Cloud 認定資格 受験登録
サンプル問題:
受験方法:	オンライン監視付き受験方式、または認定試験会場での受験方式から選択できます。
前提条件:	必須の受験資格は設けられていません。推奨される経験として、業界での実務経験3年以上、およびGoogle Cloudのネットワークソリューションの設計・運用経験1年以上が挙げられます。
公式シラバスのURL:	https://cloud.google.com/learn/certification/cloud-network-engineer

Google Professional-Cloud-Network-Engineer 試験シラバストピック:

Google Cloud Certified - Professional Cloud Network Engineerに関するよくあるご質問

Google Cloud Certified - Professional Cloud Network Engineer 認定 Professional-Cloud-Network-Engineer 試験問題：

問題 #1

Your company has a security team that manages firewalls and SSL certificates. It also has a networking team that manages the networking resources. The networking team needs to be able to read firewall rules, but should not be able to create, modify, or delete them.
How should you set up permissions for the networking team?

A. Assign members of the networking team the compute.networkAdmin role.
B. Assign members of the networking team a custom role with only the compute.networks.* and the compute.firewalls.list permissions.
C. Assign members of the networking team the compute.networkViewer role, and add the compute.networks.use permission.
D. Assign members of the networking team the compute.networkUser role.

問題 #2

You are trying to update firewall rules in a shared VPC for which you have been assigned only Network Admin permissions. You cannot modify the firewall rules. Your organization requires using the least privilege necessary.
Which level of permissions should you request?

A. Shared VPC Admin privileges from the Organization Admin.
B. Organization Admin privileges from the Organization Admin.
C. Service Project Admin privileges from the Shared VPC Admin.
D. Security Admin privileges from the Shared VPC Admin.

問題 #3

Question:
Your company's current network architecture has three VPC Service Controls perimeters:
* One perimeter (PERIMETER_PROD) to protect production storage buckets
* One perimeter (PERIMETER_NONPROD) to protect non-production storage buckets
* One perimeter (PERIMETER_VPC) that contains a single VPC (VPC_ONE)
In this single VPC (VPC_ONE), the IP_RANGE_PROD is dedicated to the subnets of the production workloads, and the IP_RANGE_NONPROD is dedicated to subnets of non-production workloads. Workloads cannot be created outside those two ranges. You need to ensure that production workloads can access only production storage buckets and non-production workloads can access only non-production storage buckets with minimal setup effort. What should you do?

A. Develop a design that removes the PERIMETER_VPC perimeter. Update the PERIMETER_PROD perimeter to include the project containing VPC_ONE. Remove the PERIMETER_NONPROD perimeter.
B. Develop a design that creates a new VPC (VPC_NONPROD) in the same project as VPC_ONE.
Migrate all the non-production workloads from VPC_ONE to the PERIMETER_NONPROD perimeter.
Remove the PERIMETER_VPC perimeter. Update the PERIMETER_PROD perimeter to include VPC_ONE and the PERIMETER_NONPROD perimeter to include VPC_NONPROD.
C. Develop a design that removes the PERIMETER_VPC perimeter. Update the PERIMETER_NONPROD perimeter to include the project containing VPC_ONE. Remove the PERIMETER_PROD perimeter.
D. Develop a design that uses the IP_RANGE_PROD and IP_RANGE_NONPROD perimeters to create two access levels, with each access level referencing a single range. Create two ingress access policies with each access policy referencing one of the two access levels. Update the PERIMETER_PROD and PERIMETER_NONPROD perimeters.

問題 #4

Your organization is developing a landing zone architecture with the following requirements:
* There should be no communication between production and non-production environments.
* Communication between applications within an environment may be necessary.
* Network administrators should centrally manage all network resources, including subnets, routes, and firewall rules.
* Each application should be billed separately.
* Developers of an application within a project should have the autonomy to create their compute resources.
* Up to 1000 applications are expected per environment.
You need to create a design that accommodates these requirements. What should you do?

A. Create a design that has one host project with a Shared VPC for the production environment, another host project with a Shared VPC for the non-production environment, and a service project that is associated with the corresponding host project for each initiative.
B. Create a design that has a Shared VPC for each project. Implement hierarchical firewall policies to apply micro-segmentation between VPCs.
C. Create a design that implements a single Shared VPC. Use VPC firewall rules with secure tags to enforce micro-segmentation between environments.
D. Create a design where each project has its own VPC. Ensure all VPCs are connected by a Network Connectivity Center hub that is centrally managed by the network team.

問題 #5

You created a new VPC for your development team. You want to allow access to the resources in this VPC via SSH only.
How should you configure your firewall rules?

A. Create a single firewall rule to allow port 22 with priority 1000.
B. Create two firewall rules: one to block all traffic with priority 65536, and another to allow port 3389 with priority 1000.
C. Create a single firewall rule to allow port 3389 with priority 1000.
D. Create two firewall rules: one to block all traffic with priority 0, and another to allow port 22 with priority 1000.

解説：