6.4 Configuring Self-Managed Network Virtual Appliance and Packet Mirroring. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   You need to capture all traffic to and from a specific VM instance in your VPC for security analysis. The collector is a VM in the same VPC. You have configured a Packet Mirroring policy that mirrors traffic from the source VM to the collector. However, you notice that the collector is not receiving any mirrored traffic. What is the most likely cause?

   • AThe source VM and the collector VM are in the same VPC but in different subnets.
   • BThe collector VM is running a firewall that blocks traffic from the source VM.
   • CThe Packet Mirroring policy does not include a filter that matches the traffic you want to capture.
   • DThe collector VM does not have a public IP address.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a key characteristic of policy-based routes in Google Cloud?

   • AThey are automatically created for every subnet
   • BThey replace all existing routes in the VPC
   • CThey are only used for internet-bound traffic
   • DThey can match traffic based on source and destination IP ranges
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary advantage of an out-of-band network security integration strategy?

   • AIt reduces the risk of traffic disruption if the security appliance fails
   • BIt eliminates the need for firewall rules
   • CIt simplifies the routing configuration
   • DIt increases the throughput of the security appliance
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   Your security team wants to deploy a network intrusion detection system (NIDS) that analyzes all traffic in a production VPC. The NIDS must not introduce any latency or risk of dropping production traffic. You have decided to use Packet Mirroring to send copies of traffic to a collector VM running the NIDS. You need to ensure that the collector VM can handle the volume of mirrored traffic. What should you do?

   • AConfigure Packet Mirroring to mirror only a sample of traffic to reduce the load on the collector.
   • BUse a large VM size for the collector and ensure it has sufficient network bandwidth.
   • CPlace the collector VM in a different VPC to avoid impacting production traffic.
   • DUse a single NIC on the collector VM to simplify configuration.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In a multi-NIC VM routing design, what is the primary purpose of having the NGFW VM attached to multiple VPC networks?

   • ATo provide redundancy for the VM's operating system
   • BTo increase the VM's CPU and memory resources
   • CTo enable the VM to route and inspect traffic between the connected networks
   • DTo allow the VM to have multiple public IP addresses
   Reveal Solution Discussion Select an answer first