Google Cloud Certified - Professional Cloud Network Engineer Professional-Cloud-Network-Engineer Question # 53 Topic 6 Discussion

Google Cloud Certified - Professional Cloud Network Engineer Professional-Cloud-Network-Engineer Question # 53 Topic 6 Discussion

Professional-Cloud-Network-Engineer Exam Topic 6 Question 53 Discussion:
Question #: 53
Topic #: 6

You are troubleshooting an application in your organization's Google Cloud network that is not functioning as expected. You suspect that packets are getting lost somewhere. The application sends packets intermittently at a low volume from a Compute Engine VM to a destination on your on-premises network through a pair of Cloud Interconnect VLAN attachments. You validated that the Cloud Next Generation Firewall (Cloud NGFW) rules do not have any deny statements blocking egress traffic, and you do not have any explicit allow rules. Following Google-recommended practices, you need to analyze the flow to see if packets are being sent correctly out of the VM to isolate the issue. What should you do?


A.

Create a packet mirroring policy that is configured with your VM as the source and destined to a collector. Analyze the packet captures.


B.

Enable VPC Flow Logs on the subnet that the VM is deployed in with sample_rate = 1.0, and run a query in Logs Explorer to analyze the packet flow.


C.

Enable Firewall Rules Logging on your firewall rules and review the logs.


D.

Verify the network/attachment/egress_dropped_packet.s_count Cloud Interconnect VLAN attachment metric.


Get Premium Professional-Cloud-Network-Engineer Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.