Google Professional Cloud Network Engineer Question 718
Select 2Google Cloud PlatformYou are tasked with troubleshooting connectivity issues between two VM instances in a Google Cloud VPC. To identify potential issues, you decide to enable logs for the relevant networking components. Which of the following logs would help you analyze traffic flow and identify potential firewall rule misconfigurations?
- A
VPC Flow Logs
- B
Cloud NAT Logs
- C
Firewall Insights Logs
- D
Cloud Router Logs
- E
Cloud DNS Query Logs
Show answer and explanation
Correct answers: A, C
Explanation
To troubleshoot connectivity issues and analyze traffic flow, VPC Flow Logs offer visibility into network traffic details, while Firewall Insights Logs help identify misconfigurations in firewall rules. Together, they provide the necessary information to diagnose and resolve the issue. Other logs, such as Cloud NAT Logs, Cloud Router Logs, and Cloud DNS Query Logs, are useful for specific use cases but not directly relevant to this scenario.
- A. Correct.
VPC Flow Logs provide detailed information about network traffic, including the source and destination, which is critical for analyzing traffic flow and identifying misconfigurations.
- B. Incorrect.
Cloud NAT Logs are specific to outbound traffic for instances without external IP addresses. While useful for NAT troubleshooting, they do not directly address general traffic flow or firewall rule misconfigurations.
- C. Correct.
Firewall Insights Logs specifically analyze the effectiveness of firewall rules and provide insights into misconfigurations or unused rules, making them highly relevant for this scenario.
- D. Incorrect.
Cloud Router Logs are focused on BGP route advertisements and do not provide traffic flow or firewall-related insights.
- E. Incorrect.
Cloud DNS Query Logs capture DNS queries and responses, which are unrelated to traffic flow analysis or firewall rule troubleshooting.