Google Professional Cloud Network Engineer Question 766
Select 2Google Cloud PlatformYou are a network engineer working for a company that has a hybrid cloud setup. A virtual machine (VM) in a private subnet of a Google Cloud VPC is unable to connect to an external service hosted on-premises through a VPN tunnel. You suspect that either a firewall rule or a route misconfiguration might be causing the issue. How can you use Connectivity Tests in Network Intelligence Center to diagnose the problem?
- A
Run a Connectivity Test from the VM's internal IP address to the on-premises service's IP address and check the 'Steps' tab for failures.
- B
Run a Connectivity Test from the VPN gateway to the VM's public IP address and verify the ingress firewall rules.
- C
Run a Connectivity Test from the VM's internal IP address to the on-premises service's IP address and check the 'Summary' tab for packet loss percentage.
- D
Run a Connectivity Test from the VM’s internal IP address to the on-premises service’s IP address and validate route and firewall configurations in the 'Steps' tab.
Show answer and explanation
Correct answers: A, D
Explanation
Connectivity Tests in Network Intelligence Center allow you to diagnose network connectivity issues effectively. By running a test from the VM's internal IP to the on-premises service's IP, you can use the 'Steps' tab to identify where the connection fails. This includes analyzing the routes and firewall rules to pinpoint misconfigurations. Other options, such as using public IPs or relying solely on the 'Summary' tab, are not appropriate for this scenario.
- A. Correct.
Correct. Running a Connectivity Test from the VM's internal IP to the on-premises service helps identify misconfigurations. The 'Steps' tab provides detailed insights into where connectivity errors occur, including routes and firewalls.
- B. Incorrect.
Incorrect. Running a test from the VPN gateway to the VM’s public IP is irrelevant in this scenario because the VM is in a private subnet, and the traffic is between the VM and the on-premises service. Also, a public IP is not used in this case.
- C. Incorrect.
Incorrect. The 'Summary' tab does not display packet loss percentage. Instead, it provides high-level connectivity results, such as whether the connection succeeded or failed. Detailed analysis requires the 'Steps' tab.
- D. Correct.
Correct. The 'Steps' tab in Connectivity Tests is the correct place to validate both route and firewall configurations for connectivity between the VM and the on-premises service.