MENU
Your organization has a new security policy that requires you to monitor all egress traffic payloads from your virtual machines in the us-west2 region. You deployed an intrusion detection system (IDS) virtual appliance in the same region to meet the new policy. You now need to integrate the IDS into the environment to monitor all egress traffic payloads from us-west2. What should you do?
Suggested Answer: C
Get Premium Professional Cloud Network Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Packet Mirroring with an internal TCP/UDP load balancer allows for comprehensive monitoring of egress traffic, which includes payloads. This is required for integration with an IDS for detailed inspection of traffic payloads, meeting the security policy needs for monitoring and detection.
34 comments · newest first
TA
Tanja
10 months ago
Really? I’m surprised they didn’t mention using a third-party IDS.
AB
Abel
10 months ago
I’m leaning towards C, but not sure if it’s the best fit.
LA
Lavonna
10 months ago
I think option B is the way to go for egress traffic.
JE
Jesusa
11 months ago
Definitely agree with that! Packet Mirroring is key here.
DE
Denna
11 months ago
Wait, why not just use option D? VPC Flow Logs seem easier.
PI
Pilar
11 months ago
I feel like enabling firewall logging might be too basic for this requirement; the IDS integration seems more complex than just forwarding logs.
KR
Kristel
11 months ago
I practiced a similar question where we had to use packet mirroring, but I can't recall if it was for egress or ingress traffic.
JE
Jerlene
11 months ago
I think enabling VPC Flow Logs could be a good option, but I’m not clear on how to set up the sink to send logs to the IDS.
NA
Nakita
12 months ago
I remember something about using load balancers for traffic monitoring, but I'm not sure if it should be HTTP(S) or TCP/UDP for this scenario.
RA
Rashad
12 months ago
Alright, time to put my networking skills to the test. Let me carefully consider each option and see which one is the most effective solution.
CR
Crista
1 year ago
I've got a good feeling about this one. I think option B is the way to go, but I'll double-check the details just to be sure.
CA
Carlota
1 year ago
Whoa, this is a tough one. I'm a bit confused by all the networking terms, but I'll give it my best shot.
CA
Carla
1 year ago
Okay, I think I've got a strategy here. Let me walk through the options and see which one makes the most sense.
TO
Tommy
1 year ago
Hmm, this seems like a tricky one. I'll need to carefully read through the options and think about the best approach.
DE
Deeanna
2 years ago
Packet Mirroring is the way to go, but I can't decide if I should use HTTP(S) or TCP/UDP. Maybe I should just flip a coin, or ask the IDS for its opinion.
MA
Major
1 year ago
Yeah, I agree. It's a reliable option for integrating the IDS to monitor egress traffic.
PE
Pearlene
1 year ago
B) Create an internal HTTP(S) load balancer for Packet Mirroring, and add a packet mirroring policy filter for egress traffic.
WH
Whitney
1 year ago
That sounds like a good plan. HTTP(S) load balancer should work well for monitoring egress traffic.
LO
Lorrie
1 year ago
B) Create an internal HTTP(S) load balancer for Packet Mirroring, and add a packet mirroring policy filter for egress traffic.
LI
Lilli
2 years ago
Option A? Seriously? Forwarding firewall logs to the IDS? That's so 2010, man. We're in the 21st century, let's use some modern tech like Packet Mirroring!
AR
Ardella
1 year ago
C) Create an internal TCP/UDP load balancer for Packet Mirroring, and add a packet mirroring policy filter for egress traffic.
LO
Lon
1 year ago
B) Create an internal HTTP(S) load balancer for Packet Mirroring, and add a packet mirroring policy filter for egress traffic.
CU
Curtis
2 years ago
I'm torn between B and C. Both of them involve using Packet Mirroring, but I'm not sure if I should go with HTTP(S) or TCP/UDP load balancer. Hmm, decisions, decisions.
BE
Bernardine
2 years ago
I'd go with Option D. Enabling VPC Flow Logs and creating a sink in Cloud Logging to send the filtered egress logs to the IDS seems like a neat and tidy solution.
GA
Garry
2 years ago
Definitely, Option D simplifies the process of integrating the IDS to monitor all egress traffic from us-west2.
CH
Cherri
2 years ago
I agree, Option D is the way to go. It provides a straightforward solution for monitoring egress traffic payloads.
ST
Staci
2 years ago
Option D sounds like the best choice. Enabling VPC Flow Logs and creating a sink in Cloud Logging seems efficient.
OL
Oliva
2 years ago
I agree with Erick, VPC Flow Logs are more comprehensive for monitoring egress traffic.
ER
Erick
2 years ago
I disagree, I believe option D is the best choice as it involves VPC Flow Logs.
CE
Ceola
2 years ago
I think we should go with option A and enable firewall logging.
LE
Leonida
2 years ago
Option B sounds like the way to go. Setting up an internal HTTP(S) load balancer for Packet Mirroring and adding a filter for egress traffic seems like the most straightforward approach.
NA
Naomi
2 years ago
I think I'll go ahead and implement that solution to integrate the IDS into the environment for monitoring egress traffic from us-west2.
BO
Bonita
2 years ago
I agree, it's a good way to ensure all egress traffic payloads are monitored as required by the new security policy.
GE
Gennie
2 years ago
Option B sounds like the way to go. Setting up an internal HTTP(S) load balancer for Packet Mirroring and adding a filter for egress traffic seems like the most straightforward approach.