PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #180
You are designing a packet mirroring policy as part of your network security architecture for your gaming workload. Your infrastructure is located in the us-west2 region and deployed across several zo
The correct answer is B. Create one packet mirroring policy for the us-west2 region. Create one group of collector. To monitor web application traffic across multiple zones in a region with Packet Mirroring while minimizing inter-zonal egress costs, create one regional packet mirroring policy and deploy a single group of collector instances across all zones, typically behind a regional Interna
Question
Options
- ACrate three packet mirroring policies: one for each zone. Create one group of collector instances
- BCreate one packet mirroring policy for the us-west2 region. Create one group of collector
- CCreate three packet mirroring policies: one for each zone. Create three groups of collector
- DCreate three packet mirroring policies: one for each zone. Create three groups of collector
How the community answered
(43 responses)- A12% (5)
- B81% (35)
- C5% (2)
- D2% (1)
Why each option
To monitor web application traffic across multiple zones in a region with Packet Mirroring while minimizing inter-zonal egress costs, create one regional packet mirroring policy and deploy a single group of collector instances across all zones, typically behind a regional Internal Load Balancer.
Creating three separate policies for each zone and then pointing them to a single group of collectors (if not strategically placed) could increase inter-zonal costs and adds unnecessary management overhead compared to a single regional policy.
Creating one packet mirroring policy for the entire `us-west2` region provides a single point of management, and deploying one group of collector instances (e.g., a regional Managed Instance Group with a regional Internal Load Balancer) across all zones ensures mirrored traffic is directed to the nearest collector, minimizing inter-zonal network egress costs.
While creating three zonal policies with three zonal collector groups effectively minimizes inter-zonal costs by containing traffic within zones, managing three separate policies for a single region is less efficient than a single regional policy.
Similar to option C, creating three zonal policies and three zonal collector groups is more administratively complex than a single regional policy, even if it helps minimize inter-zonal costs.
Concept tested: Regional Packet Mirroring policy and cost-efficient collector placement
Source: https://cloud.google.com/vpc/docs/packet-mirroring-best-practices
Topics
Community Discussion
No community discussion yet for this question.