Google Professional Cloud Network Engineer Question 717
Select 3Google Cloud PlatformYou are a network engineer managing a hybrid cloud environment for your organization. Recently, you configured a Cloud VPN tunnel between your on-premises network and your Google Cloud VPC. After deployment, users report intermittent connectivity issues. You need to enable and review logs to identify the root cause. Which logging options should you enable to troubleshoot the issue effectively?
- A
Enable Cloud VPN logs in Cloud Logging to analyze tunnel connection status and errors.
- B
Enable VPC Flow Logs to monitor traffic flow and identify dropped packets.
- C
Enable Firewall Insights to review firewall rule misconfigurations or denied traffic.
- D
Enable Cloud NAT logging to analyze NAT gateway usage and translation errors.
- E
Enable Cloud DNS logging to track DNS queries and responses for the VPC.
Show answer and explanation
Correct answers: A, B, C
Explanation
To troubleshoot intermittent connectivity issues with a Cloud VPN tunnel, it is essential to enable logs that provide insights into the VPN connection (Cloud VPN logs), traffic flow (VPC Flow Logs), and potential firewall rule misconfigurations (Firewall Insights). These logs collectively help identify the root cause of the issue. Cloud NAT and Cloud DNS logs, while useful in other contexts, do not apply to this specific scenario, as the problem is focused on VPN connectivity rather than NAT or DNS functionality.
- A. Correct.
Cloud VPN logs are critical for diagnosing connection issues, as they provide details about tunnel status, connection attempts, and errors.
- B. Correct.
VPC Flow Logs help in identifying traffic flow patterns, dropped packets, and potential connectivity issues between the VPC and on-premises network.
- C. Correct.
Firewall Insights can reveal whether any firewall rules are misconfigured or if traffic is being denied, potentially causing connectivity problems.
- D. Incorrect.
Cloud NAT logging is not relevant in this scenario, as the issue pertains to a VPN tunnel and not NAT gateway usage or translation errors.
- E. Incorrect.
Cloud DNS logging is unrelated to this scenario, as there is no indication of DNS-related issues affecting the connectivity over the VPN.