Google Professional Cloud Network Engineer Question 789
Select 2Google Cloud PlatformYour organization has deployed a multi-tier application on Google Cloud that communicates across multiple Virtual Private Cloud (VPC) networks using VPC peering. Recently, users have reported slow responses from the application. As a Professional Cloud Network Engineer, you use Network Analyzer to investigate the issue. The tool highlights the following findings: 'High utilization detected on a peered VPC connection' and 'Unnecessary firewall rules allowing overly permissive traffic.' Which actions should you take to address these findings?
- A
Increase the peering connection capacity by upgrading the bandwidth of the VPC peering route.
- B
Restrict the unnecessary firewall rules to only allow required traffic between the two VPCs.
- C
Migrate traffic from the peered VPC connection to a dedicated interconnect for better performance.
- D
Enable flow logs on the VPC peering connection to identify the source of high utilization.
- E
Optimize the application to reduce the amount of data being sent across the VPC peering connection.
Show answer and explanation
Correct answers: B, D
Explanation
To address the findings highlighted by Network Analyzer, you should focus on restricting unnecessary traffic (by adjusting overly permissive firewall rules) and using flow logs to analyze the source of high utilization. These actions directly address the root cause of the issues and align with best practices for network optimization and security. Other options are either irrelevant to the scenario or not applicable for resolving the identified findings.
- A. Incorrect.
Increasing the peering connection capacity is not a valid action because VPC peering does not have configurable bandwidth limits; the issue is likely related to traffic patterns or misconfigurations.
- B. Correct.
Restricting unnecessary firewall rules is correct because overly permissive rules can allow excessive or unintended traffic, contributing to high utilization and potential security risks.
- C. Incorrect.
Migrating to a dedicated interconnect is unnecessary for this scenario. Dedicated interconnects are used for hybrid cloud scenarios and do not apply to VPC peering within Google Cloud.
- D. Correct.
Enabling flow logs is correct because it helps identify the source of high utilization, allowing you to analyze and address the root cause of the excessive traffic.
- E. Incorrect.
Optimizing the application is not the primary solution here, as the Network Analyzer findings point to high utilization and firewall misconfigurations, not application inefficiencies.