5.2 Maintaining and Troubleshooting Connectivity Issues. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a limitation of Packet Mirroring?

   • AIt cannot block or modify traffic
   • BIt does not require a collector
   • CIt cannot capture traffic from VM instances
   • DIt cannot capture traffic at scale
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   You are troubleshooting a connectivity issue where a client can reach a VM's public IP but not its private IP from another VM in the same VPC. VPC Flow Logs show the traffic to the private IP is being 'ACCEPTED'. What is the most likely cause?

   • AThe VM's network interface is not configured with the private IP.
   • BThe route to the private IP is not present in the VPC routing table.
   • CThe VPC firewall rules are blocking the private IP traffic.
   • DThe application on the VM is listening only on the public IP address.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary use of VPC Flow Logs in troubleshooting connectivity?

   • ATo capture the full packet payload for deep inspection
   • BTo resolve DNS names for IP addresses
   • CTo analyze traffic patterns and identify dropped or rejected connections
   • DTo automatically modify firewall rules
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the purpose of a BGP route policy on a Cloud Router?

   • ATo encrypt BGP traffic
   • BTo manage firewall rules
   • CTo handle DNS resolution
   • DTo control which routes are advertised or accepted
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   You are troubleshooting why a specific client cannot reach a service in your VPC. You have reviewed the firewall logs and see that the traffic from the client's IP is being 'denied'. What is the most likely reason for this denial?

   • AA firewall rule with a lower priority is allowing the traffic, but a higher-priority rule is denying it.
   • BThe client's IP is not in the VPC's allowed CIDR range.
   • CThe VPC Flow Logs show the traffic as 'ACCEPT'.
   • DThe service is not listening on the expected port.
   Reveal Solution Discussion Select an answer first