Google Professional Cloud Network Engineer Question 729
Select 3Google Cloud PlatformYou are troubleshooting a connectivity issue in a Google Cloud environment where VM instances in a specific subnet cannot access the internet via a Cloud NAT. Which of the following steps should you take to identify and resolve the issue?
- A
Verify that the Cloud NAT is associated with the correct Cloud Router and region.
- B
Ensure that the subnet has a default route pointing to the internet gateway.
- C
Check the firewall rules to ensure egress traffic from the subnet is allowed.
- D
Confirm that the VM instances have an external IP address assigned.
- E
Review the Cloud NAT logs to identify if the traffic is reaching the NAT.
Show answer and explanation
Correct answers: A, C, E
Explanation
To troubleshoot internet connectivity issues with Cloud NAT, you need to ensure the NAT is correctly configured with the appropriate Cloud Router and region, verify that firewall rules allow egress traffic, and use Cloud NAT logs to diagnose traffic issues. Default routes to an internet gateway and external IPs are not necessary for Cloud NAT functionality.
- A. Correct.
Correct. A Cloud NAT must be properly associated with the Cloud Router and region for the traffic to route correctly.
- B. Incorrect.
Incorrect. Cloud NAT does not require a default route pointing to the internet gateway as it handles traffic routing for private IPs.
- C. Correct.
Correct. Firewall rules must allow egress traffic from the subnet to enable internet access through Cloud NAT.
- D. Incorrect.
Incorrect. Cloud NAT is specifically designed to provide internet access to resources with private IP addresses. External IP addresses are not required.
- E. Correct.
Correct. Reviewing Cloud NAT logs can help identify whether traffic is reaching the NAT and pinpoint any potential misconfigurations.