You are setting up a Dedicated Interconnect connection from your organization's on-premises data center in Frankfurt, Germany, towards the europe-west3 region, which is also in the Frankfurt metropolitan area. The AI team lead expressed their concern regarding connectivity to the europe-west4 region because their team wants to use Google Cloud TPUs for their workloads. You need to ensure that low latency network connectivity is established for this team's workloads. You want to minimize costs and operational overhead. What should you do?

• A. Set up a remote VLAN attachment to the europe-west4 region on the Dedicated Interconnect connection.
• B. Use Cloud VPN instead of Dedicated Interconnect to send traffic over the internet.
• C. Set up the Dedicated Interconnect connection towards the europe-west4 region instead of the europe-west3 region.
• D. Set up an additional Partner Interconnect connection between your data center and the europe- west4 region.

You are designing the architecture for your organization so that clients can connect to certain Google APIs. Your plan must include a way to connect to Cloud Storage and BigQuery. You also need to ensure the traffic does not traverse the internet. You want your solution to be cloud-first and require the least amount of configuration steps. What should you do?

• A. Configure a global Secure Web Proxy, and remove the default route to the internet.
• B. Configure Private Google Access on the VPC resource. Create a default route to the internet.
• C. Configure Cloud NAT, and remove the default route to the internet.
• D. Configure Private Google Access on the subnet resource. Create a default route to the internet.

You have the networking configuration shown in the diagram. A pair of redundant Dedicated Interconnect connections (int-Iga1 and int-Iga2) terminate on the same Cloud Router. The Interconnect connections terminate on two separate on-premises routers. You are advertising the same prefixes from the Border Gateway Protocol (BGP) sessions associated with the Dedicated Interconnect connections. You need to configure one connection as Active for both ingress and egress traffic. If the active Interconnect connection falls, you want the passive Interconnect connection to automatically begin routing all traffic. Which two actions should you take to meet this requirement? (Choose two.)

• A. Advertise a lower MED on the passive Interconnect connection from the on-premises router.
• B. Advertise a lower MED on the active Interconnect connection from the on-premises router.
• C. Configure the advertised route priority as 200 for the BGP session associated with the active interconnect connection.
• D. Configure the advertised route priority as 200 for the BGP session associated with the passive Interconnect connection.
• E. Configure the advertised route priority > 10,200 on the active Interconnect connection.

You are designing a packet mirroring policy as part of your network security architecture for your gaming workload. Your infrastructure is located in the us-west2 region and deployed across several zones: us-west2-a, us-west2-b, and us-west2-c. The infrastructure is running a web- based application on TCP ports 80 and 443 with other game servers that utilize the UDP protocol.
You need to deploy packet mirroring policies and collector instances to monitor web application traffic while minimizing inter-zonal network egress costs.
Following Google-recommended practices, how should you deploy the packet mirroring policies and collector instances?

• A. Crate three packet mirroring policies: one for each zone. Create one group of collector instances for the us-west2 region. Configure each packet mirroring policy to match traffic for its zone based on instance-tags, and create a filter for TCP traffic.
• B. Create three packet mirroring policies: one for each zone. Create three groups of collector instances: one group for each zone. Configure each policy to match traffic for its zone based on instance-tags, and create a filter for TCP traffic.
• C. Create three packet mirroring policies: one for each zone. Create three groups of collector instances: one group for each zone. Configure each policy to match traffic for its zone based on subnets, and create a filter for TCP traffic.
• D. Create one packet mirroring policy for the us-west2 region. Create one group of collector instances for the us-west2 region. Configure the packet mirroring policy to match traffic for web server instances based on instance-tags, and create a filter for TCP traffic.