Google Professional Cloud Network Engineer Question 785
Select 3Google Cloud PlatformYour organization recently deployed a new VPC with multiple subnets and firewall rules to support a critical application. However, users are reporting intermittent connectivity issues when accessing the application. You decide to use Network Analyzer in Google Cloud to troubleshoot the problem. Which of the following findings from Network Analyzer could help identify the root cause of the issue?
- A
A subnet has no route to an internet gateway, but the application relies on external APIs.
- B
A firewall rule is configured with a priority of 1000, allowing ingress traffic from all IP ranges.
- C
A subnet has exceeded its allocated IP address utilization threshold.
- D
A VM instance has a network tag mismatch, preventing it from accessing required subnets.
- E
The VPC's flow logs are disabled, resulting in limited visibility into network traffic.
Show answer and explanation
Correct answers: A, C, D
Explanation
Network Analyzer is a powerful tool for identifying network failures, misconfigurations, and utilization warnings in Google Cloud. In this scenario, the issues related to missing routes to an internet gateway, high IP address utilization, and network tag mismatches are all potential root causes of intermittent connectivity problems. Network Analyzer can detect these issues and offer recommendations to resolve them. However, some findings, like overly permissive firewall rules or disabled flow logs, are not directly related to the specific problem described.
- A. Correct.
Correct: If a subnet has no route to an internet gateway but the application relies on external APIs, it could cause connectivity issues. Network Analyzer can detect missing or misconfigured routes.
- B. Incorrect.
Incorrect: A firewall rule with a priority of 1000 allowing ingress traffic from all IP ranges may lead to security vulnerabilities but is not directly related to intermittent connectivity issues.
- C. Correct.
Correct: If a subnet exceeds its allocated IP address utilization threshold, new connections may fail, leading to intermittent connectivity issues. Network Analyzer can identify utilization warnings.
- D. Correct.
Correct: A network tag mismatch can prevent a VM from accessing required subnets, leading to connectivity problems. Network Analyzer helps identify misconfigurations like this.
- E. Incorrect.
Incorrect: While disabled flow logs reduce visibility into traffic, they do not directly cause connectivity issues. This is more about monitoring and troubleshooting capability.