Google Professional Cloud Network Engineer Question 368
Select 3Google Cloud PlatformYour organization is experiencing unexpected network traffic behavior and wants to investigate the issue. To achieve this, you need to enable logging for a specific firewall rule in your Virtual Private Cloud (VPC). Which of the following steps should you take to configure Firewall Rules Logging correctly in Google Cloud?
- A
Enable the 'Firewall Rules Logging' feature in the Google Cloud Console for the desired firewall rule.
- B
Ensure that Cloud Logging is enabled for your project.
- C
Modify the firewall rule to include an action tag for logging.
- D
Assign a service account with logging permissions to the firewall rule.
- E
Verify that the logs are being written to the 'firewall.googleapis.com' resource in Cloud Logging.
Show answer and explanation
Correct answers: A, B, E
Explanation
To enable Firewall Rules Logging in Google Cloud, you need to explicitly enable logging for the desired firewall rule through the console or CLI. Additionally, Cloud Logging must be active for the project to capture and store the logs. Once configured, logs are written to the 'firewall.googleapis.com' resource in Cloud Logging, allowing you to monitor and troubleshoot network traffic behavior effectively.
- A. Correct.
Correct. Firewall Rules Logging must be explicitly enabled for each firewall rule in the Google Cloud Console or via the gcloud CLI.
- B. Correct.
Correct. For Firewall Rules Logging to work, Cloud Logging must be enabled for the project, as it is the destination for the logs.
- C. Incorrect.
Incorrect. Firewall rules do not use action tags for enabling logging. Logging is configured separately through settings.
- D. Incorrect.
Incorrect. Assigning a service account is not required for enabling Firewall Rules Logging. Service accounts are used for other purposes like authentication.
- E. Correct.
Correct. Once logging is enabled, the logs will be written to the 'firewall.googleapis.com' resource in Cloud Logging, and verifying this ensures that the setup is working as expected.