nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #157

You have configured a service on Google Cloud that connects to an on-premises service via a Dedicated Interconnect. Users are reporting recent connectivity issues. You need to determine whether the…

The correct answer is A. Use the Network Intelligence Center Connectivity Tests to test the connectivity between the VPC. Network Intelligence Center Connectivity Tests perform a static simulation of the network data path between two endpoints. It analyzes the applicable VPC firewall rules, routes, and network configuration to determine exactly where and why traffic is being dropped…

Submitted by yuki_2020· Apr 18, 2026Implementing a Google Cloud network

Question

You have configured a service on Google Cloud that connects to an on-premises service via a Dedicated Interconnect. Users are reporting recent connectivity issues. You need to determine whether the traffic is being dropped because of firewall rules or a routing decision. What should you do?

Options

  • AUse the Network Intelligence Center Connectivity Tests to test the connectivity between the VPC
  • BUse Network Intelligence Center Network Topology to check the traffic flow, and replay the traffic
  • CConfigure VPC Flow Logs. Review the logs by filtering on the source and destination.
  • DConfigure a Compute Engine instance on the same VPC as the service running on Google Cloud

How the community answered

(30 responses)
  • A
    77% (23)
  • B
    7% (2)
  • C
    13% (4)
  • D
    3% (1)

Explanation

Network Intelligence Center Connectivity Tests perform a static simulation of the network data path between two endpoints. It analyzes the applicable VPC firewall rules, routes, and network configuration to determine exactly where and why traffic is being dropped - distinguishing between a firewall rule block and a routing failure. This gives you the definitive answer without needing to generate live traffic. VPC Flow Logs (option C) only show metadata about flows that were actually processed by the network; they do not explain routing decisions or definitively identify firewall drops. Network Topology (option B) visualizes traffic volumes but does not diagnose specific packet-level drops.

Topics

#Network Diagnostics#Troubleshooting#Connectivity Tests#Hybrid Connectivity

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice