5.3 Using Network Intelligence Center to Monitor and Troubleshoot Common Networking Issues. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has applications in two Google Cloud regions: us-central1 and europe-west1. Users report that the application in europe-west1 is experiencing high latency when communicating with the application in us-central1. You need to determine if the latency is due to the Google Cloud network or the application itself. What should you do first?

   • AUse Flow Analyzer to look at the traffic between the two regions.
   • BUse the Performance Dashboard to view the latency between us-central1 and europe-west1.
   • CRun a Connectivity Test from a VM in us-central1 to a VM in europe-west1.
   • DUse Network Topology to see the path between the two regions.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A DevOps team needs to understand which VMs in a project are generating the most traffic to a specific database VM, and whether the traffic is being dropped by firewall rules. They have already enabled VPC Flow Logs. What should they use to analyze this data?

   • AFlow Analyzer to query flow logs for traffic to the database VM and filter by source VM.
   • BNetwork Topology to see the traffic volume between the VMs.
   • CPerformance Dashboard to see the latency between the VMs.
   • DConnectivity Test from the database VM to each source VM.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A network engineer wants to identify firewall rules that are rarely used or have become 'shadowed' by other rules, in order to clean up their firewall configuration. Which Network Intelligence Center product provides this insight?

   • APerformance Dashboard
   • BFirewall Insights
   • CNetwork Analyzer
   • DConnectivity Tests
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security team is conducting a firewall rule audit. They have a large number of rules and want to identify rules that are overly permissive (e.g., allowing traffic from 0.0.0.0/0) and rules that are never used. They also want to understand if any rules are shadowed by higher-priority rules. They need a single tool that can provide all this information. Which tool should they use?

   • AFlow Analyzer to review traffic logs and infer rule usage.
   • BNetwork Analyzer to check for firewall misconfigurations and usage.
   • CFirewall Insights to get a comprehensive analysis of rule usage, permissiveness, and shadowing.
   • DConnectivity Tests to check each rule for permissiveness.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company has a hub-and-spoke VPC topology with VPC Network Peering between the hub and two spoke VPCs. Applications in spoke A can reach the hub, but cannot reach applications in spoke B. Network Topology shows the expected paths and no firewall rules are blocking traffic. You need to identify why traffic is failing. What should you do first?

   • AEnable VPC Flow Logs on the hub VPC and analyze traffic with Flow Analyzer.
   • BRun a Connectivity Test from a VM in spoke A to a VM in spoke B, specifying the hub VPC as the destination network.
   • CCheck the Network Analyzer findings for the hub VPC to see if there are any route conflicts.
   • DReview the Performance Dashboard for latency between the two spoke regions.
   Reveal Solution Discussion Select an answer first