PROFESSIONAL-CLOUD-DEVELOPER · Question #88
Your organization has grown, and new teams need access to manage network connectivity within and across projects. You are now seeing intermittent timeout errors in your application. You want to find t
The correct answer is C. Configure VPC flow logs for each of the subnets in your VPC.. VPC Flow Logs capture metadata about TCP/UDP flows traversing each subnet - source/destination IPs, ports, protocol, bytes, packets, and whether traffic was accepted or dropped. Intermittent timeouts caused by network connectivity changes (e.g., misconfigured firewall rules or ro
Question
Your organization has grown, and new teams need access to manage network connectivity within and across projects. You are now seeing intermittent timeout errors in your application. You want to find the cause of the problem. What should you do?
Options
- ASet up wireshark on each Google Cloud Virtual Machine instance.
- BReview the instance admin activity logs in Stackdriver for the application instances.
- CConfigure VPC flow logs for each of the subnets in your VPC.
- DConfigure firewall rules logging for each of the firewalls in your VPC.
How the community answered
(54 responses)- A20% (11)
- B9% (5)
- C65% (35)
- D6% (3)
Explanation
VPC Flow Logs capture metadata about TCP/UDP flows traversing each subnet - source/destination IPs, ports, protocol, bytes, packets, and whether traffic was accepted or dropped. Intermittent timeouts caused by network connectivity changes (e.g., misconfigured firewall rules or routes added by new teams) are diagnosable by examining these logs for dropped or incomplete connections. Wireshark (A) would require installing agents on every VM and does not scale. Admin activity logs (B) track API calls to GCP control plane, not network traffic. Firewall rule logging (D) only records traffic hitting firewall rules; it would not capture routing or subnet-level issues, and you must enable it per-rule before the event occurs.
Topics
Community Discussion
No community discussion yet for this question.