nerdexam
Google

PROFESSIONAL-CLOUD-DEVELOPER · Question #88

Your organization has grown, and new teams need access to manage network connectivity within and across projects. You are now seeing intermittent timeout errors in your application. You want to find t

The correct answer is C. Configure VPC flow logs for each of the subnets in your VPC.. VPC Flow Logs capture metadata about TCP/UDP flows traversing each subnet - source/destination IPs, ports, protocol, bytes, packets, and whether traffic was accepted or dropped. Intermittent timeouts caused by network connectivity changes (e.g., misconfigured firewall rules or ro

Debugging and troubleshooting application issues

Question

Your organization has grown, and new teams need access to manage network connectivity within and across projects. You are now seeing intermittent timeout errors in your application. You want to find the cause of the problem. What should you do?

Options

  • ASet up wireshark on each Google Cloud Virtual Machine instance.
  • BReview the instance admin activity logs in Stackdriver for the application instances.
  • CConfigure VPC flow logs for each of the subnets in your VPC.
  • DConfigure firewall rules logging for each of the firewalls in your VPC.

How the community answered

(54 responses)
  • A
    20% (11)
  • B
    9% (5)
  • C
    65% (35)
  • D
    6% (3)

Explanation

VPC Flow Logs capture metadata about TCP/UDP flows traversing each subnet - source/destination IPs, ports, protocol, bytes, packets, and whether traffic was accepted or dropped. Intermittent timeouts caused by network connectivity changes (e.g., misconfigured firewall rules or routes added by new teams) are diagnosable by examining these logs for dropped or incomplete connections. Wireshark (A) would require installing agents on every VM and does not scale. Admin activity logs (B) track API calls to GCP control plane, not network traffic. Firewall rule logging (D) only records traffic hitting firewall rules; it would not capture routing or subnet-level issues, and you must enable it per-rule before the event occurs.

Topics

#VPC Flow Logs#Network Troubleshooting#Application Connectivity#Google Cloud Networking

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DEVELOPER Practice