5.1 Logging and Monitoring with Google Cloud Observability. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   Your company has a Dedicated Interconnect connection with two VLAN attachments. One VLAN attachment is experiencing high latency, while the other is performing normally. You need to determine whether the issue is with the physical circuit or with the specific VLAN attachment. What should you do?

   • ACheck the interconnect circuit availability metric.
   • BReview BGP session state for both VLAN attachments.
   • CReview VPC Flow Logs for traffic on the affected VLAN.
   • DCompare latency metrics for both VLAN attachments and the interconnect circuit.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   Your organization is required to retain logs of all traffic to and from a specific set of VMs for compliance. You have enabled VPC Flow Logs, but you also need to ensure that the logs are stored for a longer period than the default retention. What should you do?

   • ACreate a log sink to export VPC Flow Logs to Cloud Storage.
   • BUse Cloud Monitoring to create an alert on VPC Flow Logs volume.
   • CEnable Firewall Rules Logging on all firewall rules.
   • DIncrease the VPC Flow Logs sampling rate to 100%.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which networking component can generate logs that are enabled through Cloud Logging to provide visibility into accepted and blocked traffic based on firewall rules?

   • ACloud DNS logs
   • BCloud NGFW logs
   • CCloud NAT logs
   • DVPC Flow Logs
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   You have a Cloud Router that is advertising routes to an on-premises network. You suspect that the Cloud Router is not advertising all the expected routes. Which metrics should you review to confirm this?

   • ACloud NAT connection count and dropped packets metrics
   • BBGP session state and tunnel status metrics
   • CVPC Flow Logs and firewall rule logs
   • DCloud Router routes advertised and route updates metrics
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   Your organization runs a web application on Google Cloud behind an external HTTP(S) load balancer. The security team wants to audit all requests that were blocked by Cloud Armor policies, including the source IP and the matched rule. You need to ensure the necessary data is available in Cloud Logging for the audit. What should you do?

   • AEnable Cloud Armor logging by attaching a logging configuration to the security policy.
   • BExport the load balancer's request logs to BigQuery using a log sink.
   • CEnable VPC Flow Logs on the subnet that hosts the backend instances.
   • DEnable Firewall Rules Logging on the VPC firewall rules that allow traffic to the load balancer.
   Reveal Solution Discussion Select an answer first