nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #173

Your product team has web servers running on both us-east1 and us-west1 regions in the prod- servers project. Your security team plans to install an intrusion detection system (IDS) in their own…

The correct answer is A. Create a new project and a VPC for the security team. https://cloud.google.com/vpc/docs/packet-mirroring#key_properties A collector destination must be in the same region as the mirrored sources. A collector destination can be located in either the same VPC network as the mirrored sources or a VPC network connected to the mirrored…

Submitted by layla.eg· Apr 18, 2026Designing, planning, and prototyping a Google Cloud network

Question

Your product team has web servers running on both us-east1 and us-west1 regions in the prod- servers project. Your security team plans to install an intrusion detection system (IDS) in their own Google Cloud project to inspect the incoming network traffic. What should you do?

Options

  • ACreate a new project and a VPC for the security team.
  • BCreate a host project and a Sharad VPC for the security team.
  • CCreate a new project and a VPC for the security team.
  • DCreate a host project and a Shared VPC for the security team.

How the community answered

(48 responses)
  • A
    75% (36)
  • B
    13% (6)
  • C
    4% (2)
  • D
    8% (4)

Explanation

https://cloud.google.com/vpc/docs/packet-mirroring#key_properties A collector destination must be in the same region as the mirrored sources. A collector destination can be located in either the same VPC network as the mirrored sources or a VPC network connected to the mirrored sources' network using VPC Network Peering.

Topics

#Google Cloud Project#VPC#Network Security#IDS

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice