Professional Cloud Network Engineer exam
50-60 multiple choice and multiple select questions.
- Type
- Written
- Delivery
- Both
- Duration
- 120 min
Exam sections
Designing and planning a Google Cloud Virtual Private Cloud (VPC) network
Covers designing high availability, failover, disaster recovery, and scalable network architectures. Includes DNS topology design, load balancer selection, hybrid connectivity, GKE networking, IAM roles, and VPC configuration with IP address management strategies.
Preparation tips
Focus on DNS topology, Shared VPC IAM roles, GKE network planning, and IP address management including IPv6 and non-RFC 1918 addresses.
Implementing a VPC network
Focuses on configuring VPC resources like networks, subnets, firewall rules, and Shared VPC. Includes setting up static and dynamic routing with Cloud Router, global/regional dynamic routing, Network Connectivity Center (NCC) spokes, and GKE cluster networking configurations.
Preparation tips
Review Cloud Router configuration, Shared VPC subnet sharing, and GKE network policies including alias IPs and Dataplane V2.
Configuring managed network services
Involves configuring load balancing solutions, Cloud CDN for various origins, and Cloud DNS zones. Covers backend services, traffic management for Application Load Balancers, signed URLs, DNS security extensions (DNSSEC), and cross-project binding for DNS.
Preparation tips
Understand the differences between global and regional load balancers and how to configure Cloud DNS routing policies like geolocation.
Configuring and implementing hybrid and multi-cloud network interconnectivity
Covers Cloud Interconnect (Dedicated, Partner, Cross-Cloud), site-to-site IPsec VPN (HA and Classic), and Cloud Router BGP attributes. Includes implementing SLA topologies, BFD, and site-to-site data transfer via Network Connectivity Center and Router appliances.
Preparation tips
Focus on HA VPN setup, VLAN attachments for Dedicated/Partner Interconnect, and BGP attributes like MED and route priority.
Managing, monitoring, and troubleshooting network operations
Focuses on logging and monitoring with Google Cloud Observability and troubleshooting connectivity issues for VPNs, Interconnect, and BGP. Utilizes Network Intelligence Center tools like Connectivity Tests, Network Topology, and Performance Dashboard for diagnostics.
Preparation tips
Practice using Connectivity Tests and Firewall Insights to diagnose route/firewall misconfigurations and VPC Flow Logs for traffic analysis.
Configuring, implementing and managing a cloud network security solution
Includes Google Cloud Armor for WAF, DDoS protection, and bot management. Covers Cloud Next Generation Firewall (NGFW) policies, hierarchical firewall rules, layer 7 packet inspection, and securing egress traffic via Cloud NAT and Secure Web Proxy.
Preparation tips
Review Cloud Armor security policies, NGFW hierarchy and tiers (Essentials, Standard, Enterprise), and Cloud NAT IP addressing.
