Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Network Engineer Exam - Topic 2 Question 25 Discussion

Your company is running out of network capacity to run a critical application in the on-premises data center. You want to migrate the application to GCP. You also want to ensure that the Security team does not lose their ability to monitor traffic to and from Compute Engine instances.Which two products should you incorporate into the solution? (Choose two.)
A) VPC flow logs and B) Firewall logs
C) Cloud Audit logs
D) Stackdriver Trace
E) Compute Engine instance system logs

Google Professional Cloud Network Engineer Exam - Topic 2 Question 25 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam
Question #: 25
Topic #: 2
[All Professional Cloud Network Engineer Questions]

Your company is running out of network capacity to run a critical application in the on-premises data center. You want to migrate the application to GCP. You also want to ensure that the Security team does not lose their ability to monitor traffic to and from Compute Engine instances.

Which two products should you incorporate into the solution? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, B

A: Using VPC Flow Logs VPC Flow Logs records a sample of network flows sent from and received by VM instances, including instances used as GKE nodes. These logs can be used for network monitoring, forensics, real-time security analysis, and expense optimization. https://cloud.google.com/vpc/docs/using-flow-logs (B): Firewall Rules Logging overview Firewall Rules Logging allows you to audit, verify, and analyze the effects of your firewall rules. For example, you can determine if a firewall rule designed to deny traffic is functioning as intended. Firewall Rules Logging is also useful if you need to determine how many connections are affected by a given firewall rule. You enable Firewall Rules Logging individually for each firewall rule whose connections you need to log. Firewall Rules Logging is an option for any firewall rule, regardless of the action (allow or deny) or direction (ingress or egress) of the rule. https://cloud.google.com/vpc/docs/firewall-rules-logging


by Tamar at May 08, 2022, 07:43 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Shanice
10 months ago
Isn't Stackdriver Trace more for performance than security?
upvoted 0 times
...
Maile
10 months ago
I disagree, Firewall logs are more important than you think.
upvoted 0 times
...
Juan
11 months ago
Surprised that people overlook VPC flow logs, they're crucial!
upvoted 0 times
...
Jolene
11 months ago
I think Cloud Audit logs could be useful too.
upvoted 0 times
...
Erick
11 months ago
Definitely VPC flow logs and Firewall logs!
upvoted 0 times
...
Gertude
11 months ago
I vaguely recall something about Stackdriver Trace, but I don’t think it’s focused on traffic monitoring. I’m pretty sure we need to stick with the first two options.
upvoted 0 times
...
Tresa
11 months ago
I practiced a similar question last week, and I think Cloud Audit logs might not be the best fit for monitoring traffic specifically. I’m leaning towards VPC flow logs and Firewall logs.
upvoted 0 times
...
Tamar
11 months ago
I’m not entirely sure about the second option. I feel like Firewall logs could be relevant too, but I’m confused about how they differ from VPC flow logs.
upvoted 0 times
...
Jaclyn
11 months ago
I remember we discussed VPC flow logs in class, and how they help with monitoring traffic. I think that’s definitely one of the options we should choose.
upvoted 0 times
...
Josephine
11 months ago
This seems like a straightforward question. I think the Telegraf agent is the best choice since it's designed for collecting and sending performance data directly to Azure Storage.
upvoted 0 times
...
Marvel
11 months ago
Okay, I've got this. The key is that statistical methods provide a scientific basis for planning the sample size, which is what the question is asking about. I'll select that option confidently.
upvoted 0 times
...
Precious
11 months ago
This seems like a tricky situation. I'd probably start by revisiting the communications plan to see how we can better involve the finance team going forward.
upvoted 0 times
...

Save Cancel