Google Professional Cloud Network Engineer Question 765
Single answerGoogle Cloud PlatformYou are a network engineer managing a Google Cloud project. A VM in subnet A cannot communicate with a VM in subnet B within the same VPC. You suspect a route or firewall rule configuration issue. How can you use Connectivity Tests to diagnose the problem?
- A
Run a Connectivity Test between the source VM and the destination VM and examine the hops to identify where the connectivity fails.
- B
Enable VPC Flow Logs on both subnets and use the logs to manually identify the issue.
- C
Run a Connectivity Test and review the test result's detailed report for failed steps, such as dropped packets due to firewall rules.
- D
Use the Google Cloud Console to manually inspect the firewall rules and routes for both subnets.
Show answer and explanation
Correct answer: A
Explanation
Connectivity Tests in Google Cloud are designed to simplify the diagnosis of network connectivity issues, such as misconfigured routes or firewall rules. By simulating the traffic path between a source and destination, Connectivity Tests can provide detailed insights into where the connectivity fails, making it the most effective solution for the given scenario.
- A. Correct.
This is correct. Connectivity Tests can trace the path between a source and destination, showing the exact hop where the connectivity fails, making it an effective tool to diagnose route and firewall misconfigurations.
- B. Incorrect.
This is incorrect. While VPC Flow Logs can provide visibility into network traffic, they do not directly indicate routing or firewall misconfigurations as effectively as Connectivity Tests.
- C. Incorrect.
This is partially correct but not the best answer. Reviewing the detailed report of Connectivity Tests can help identify issues, but it does not directly show the hops where the failure occurs, which is more actionable for diagnosing problems.
- D. Incorrect.
This is incorrect. Manually inspecting firewall rules and routes is time-consuming, error-prone, and does not leverage the automated diagnostics provided by Connectivity Tests.