Google Professional Cloud Network Engineer Question 769
Single answerGoogle Cloud PlatformYou are troubleshooting connectivity between a Compute Engine instance (Instance A) in VPC 'network-a' and another Compute Engine instance (Instance B) in VPC 'network-b'. A VPC peering connection exists between the two VPC networks. You suspect a route or firewall rule misconfiguration is causing the issue. How can you use Connectivity Tests in the Google Cloud Console to identify the root cause?
- A
Create a Connectivity Test specifying Instance A as the source and Instance B as the destination, and review the test results for route or firewall rule errors.
- B
Run a traceroute command from Instance A to Instance B to identify any misconfigured routes or firewalls.
- C
Create a Connectivity Test specifying Instance B as the source and Instance A as the destination, and ensure the test passes in both directions.
- D
Use the Network Intelligence Center's Flow Logs to analyze the traffic flow between the two instances.
Show answer and explanation
Correct answer: A
Explanation
Connectivity Tests in the Google Cloud Console are a powerful tool for diagnosing networking issues by simulating traffic paths between a source and destination. They provide insights into potential network misconfigurations, such as missing routes or firewall rules, making them the best option for this scenario.
- A. Correct.
Correct. Connectivity Tests in the Google Cloud Console allow you to simulate traffic between a source and destination, such as instances in different VPCs, and identify issues with routes, firewalls, and other network components.
- B. Incorrect.
Incorrect. While traceroute can provide insights into network hops, it does not offer detailed information about Google Cloud-specific configurations like route or firewall misconfigurations.
- C. Incorrect.
Incorrect. While testing connectivity in both directions can be helpful for troubleshooting, the question asks specifically about diagnosing route and firewall misconfigurations, which can be done using Connectivity Tests.
- D. Incorrect.
Incorrect. Flow Logs are useful for analyzing actual traffic patterns but are not designed for directly diagnosing misconfigured routes or firewalls.