Google Professional Cloud Network Engineer Question 754
Select 4Google Cloud PlatformYour organization has deployed a web application in a Google Cloud VPC. Users are reporting intermittent connectivity issues when trying to access the application. You are tasked with troubleshooting the issue and have access to VPC Flow Logs, firewall logs, and Packet Mirroring. Which of the following steps would help you identify the root cause of the problem?
- A
Analyze the VPC Flow Logs to check for any denied traffic to the application’s backend instances.
- B
Examine the firewall logs to verify if the firewall rules are allowing traffic from the users’ source IPs.
- C
Use Packet Mirroring to capture and inspect the packets to and from the backend instances for anomalies.
- D
Disable all existing firewall rules temporarily to see if the issue gets resolved.
- E
Check the VPC Flow Logs for traffic patterns to identify potential network latency issues.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
Troubleshooting intermittent connectivity issues in a Google Cloud VPC requires a systematic approach. VPC Flow Logs, firewall logs, and Packet Mirroring are powerful tools for diagnosing traffic patterns, identifying denied traffic, and inspecting packet anomalies. Disabling firewall rules is not a safe troubleshooting method as it poses significant security risks. By leveraging these tools, you can pinpoint the root cause of the issue effectively.
- A. Correct.
Analyzing VPC Flow Logs can help identify if traffic is being denied due to incorrect routing or firewall configurations, which might be causing the connectivity issue.
- B. Correct.
Examining firewall logs helps ensure that the firewall rules are not inadvertently blocking legitimate traffic from users.
- C. Correct.
Packet Mirroring allows deep packet inspection to identify potential anomalies, such as incorrect packet formatting or unexpected TCP resets, which could be contributing to the issue.
- D. Incorrect.
Disabling all firewall rules is not a recommended practice as it introduces security risks and might not provide useful diagnostic information.
- E. Correct.
Checking VPC Flow Logs for traffic patterns can help identify latency issues or unexpected drops, which could indicate underlying network problems.