5.1 Logging and Monitoring with Google Cloud Observability. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   You operate a web application behind an external HTTP(S) load balancer with Cloud Armor enabled. Users report that some requests are being blocked, but you suspect that the blocking is due to the load balancer's backend health rather than Cloud Armor. You need to determine whether Cloud Armor or the backend is causing the failures. What should you do?

   • ADisable Cloud Armor temporarily to see if the issue resolves.
   • BReview only load balancer backend health metrics.
   • CReview Cloud Armor logs for blocked requests and load balancer backend health metrics.
   • DReview only Cloud Armor logs for blocked requests.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A network engineer wants to monitor the amount of data transmitted through a Cloud VPN tunnel. Which metric should be reviewed?

   • AThroughput
   • BBGP session state
   • CDropped packets
   • DRequest count
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A network engineer wants to monitor the number of routes advertised by a Cloud Router. Which metric should be reviewed?

   • ABlocked requests
   • BRequest count
   • CThroughput
   • DRoutes advertised
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   You manage a VPC network that uses Cloud NAT to provide outbound internet access to instances in a private subnet. Users report that some outbound connections are failing. You need to determine whether the Cloud NAT gateway is exhausting its connection limit or dropping packets. Which metrics should you review in Cloud Monitoring?

   • AVPC Flow Logs and firewall rule logs
   • BCloud Router BGP session state and route advertisements
   • CCloud NAT connection count and dropped packets metrics
   • DLoad balancer request count and backend health metrics
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A network engineer needs to enable logging for a Cloud VPN tunnel to capture tunnel-related logs. Which Google Cloud service must be used to enable and view these logs?

   • ANetwork Intelligence Center
   • BCloud Audit Logs
   • CCloud Logging
   • DCloud Monitoring
   Reveal Solution Discussion Select an answer first