5.3 Using Network Intelligence Center to Monitor and Troubleshoot Common Networking Issues. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A user reports they cannot reach a VM from their on-premises network via a VPN tunnel. A network engineer needs to determine if the issue is caused by a firewall rule or a route misconfiguration. Which Network Intelligence Center tool should be used?

   • ANetwork Topology
   • BConnectivity Tests
   • CFirewall Insights
   • DPerformance Dashboard
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company has a large VPC with hundreds of VMs. A new application has been deployed, and the network team wants to understand the traffic patterns it generates. They are concerned about the impact on other applications. They need to identify the top talkers and see if any traffic is being dropped. They have a limited budget and want to minimize costs. What is the most cost-effective approach?

   • AUse Network Analyzer to check for any warnings about the new application.
   • BUse Network Topology to view the traffic flows from the new application.
   • CRun Connectivity Tests from the new application's VMs to all other VMs.
   • DEnable VPC Flow Logs on the subnet where the new application is deployed and use Flow Analyzer.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A network engineer is investigating a security incident. They have VPC Flow Logs enabled and need to determine if a specific VM was accessed from a suspicious IP address. They also need to know if the traffic was allowed or denied by firewall rules. They have already used Flow Analyzer to find the traffic and see that it was denied. Now they need to understand why it was denied. What should they do next?

   • AUse Network Analyzer to see if there are any warnings about the VM.
   • BReview Firewall Insights to see if the rule that denied the traffic is overly permissive.
   • CUse the Performance Dashboard to check for packet loss from the suspicious IP.
   • DRun a Connectivity Test from the suspicious IP to the VM to see which firewall rule is blocking the traffic.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A network engineer needs to query VPC Flow Logs to analyze traffic patterns between specific VMs over the last hour. Which Network Intelligence Center tool is designed for this type of log analysis?

   • ANetwork Topology
   • BConnectivity Tests
   • CFlow Analyzer
   • DNetwork Analyzer
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A network engineer needs to see a global view of latency and packet loss between Google Cloud regions and Google's public services. Which Network Intelligence Center dashboard provides this information?

   • APerformance Dashboard
   • BConnectivity Tests
   • CFirewall Insights
   • DNetwork Topology
   Reveal Solution Discussion Select an answer first