nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #180

You are designing a packet mirroring policy as part of your network security architecture for your gaming workload. Your infrastructure is located in the us-west2 region and deployed across several zo

The correct answer is B. Create one packet mirroring policy for the us-west2 region. Create one group of collector. To monitor web application traffic across multiple zones in a region with Packet Mirroring while minimizing inter-zonal egress costs, create one regional packet mirroring policy and deploy a single group of collector instances across all zones, typically behind a regional Interna

Submitted by carlos_mx· Apr 18, 2026Designing, planning, and prototyping a Google Cloud network

Question

You are designing a packet mirroring policy as part of your network security architecture for your gaming workload. Your infrastructure is located in the us-west2 region and deployed across several zones: us-west2-a, us-west2-b, and us-west2-c. The infrastructure is running a web- based application on TCP ports 80 and 443 with other game servers that utilize the UDP protocol. You need to deploy packet mirroring policies and collector instances to monitor web application traffic while minimizing inter-zonal network egress costs. Following Google-recommended practices, how should you deploy the packet mirroring policies and collector instances?

Options

  • ACrate three packet mirroring policies: one for each zone. Create one group of collector instances
  • BCreate one packet mirroring policy for the us-west2 region. Create one group of collector
  • CCreate three packet mirroring policies: one for each zone. Create three groups of collector
  • DCreate three packet mirroring policies: one for each zone. Create three groups of collector

How the community answered

(43 responses)
  • A
    12% (5)
  • B
    81% (35)
  • C
    5% (2)
  • D
    2% (1)

Why each option

To monitor web application traffic across multiple zones in a region with Packet Mirroring while minimizing inter-zonal egress costs, create one regional packet mirroring policy and deploy a single group of collector instances across all zones, typically behind a regional Internal Load Balancer.

ACrate three packet mirroring policies: one for each zone. Create one group of collector instances

Creating three separate policies for each zone and then pointing them to a single group of collectors (if not strategically placed) could increase inter-zonal costs and adds unnecessary management overhead compared to a single regional policy.

BCreate one packet mirroring policy for the us-west2 region. Create one group of collectorCorrect

Creating one packet mirroring policy for the entire `us-west2` region provides a single point of management, and deploying one group of collector instances (e.g., a regional Managed Instance Group with a regional Internal Load Balancer) across all zones ensures mirrored traffic is directed to the nearest collector, minimizing inter-zonal network egress costs.

CCreate three packet mirroring policies: one for each zone. Create three groups of collector

While creating three zonal policies with three zonal collector groups effectively minimizes inter-zonal costs by containing traffic within zones, managing three separate policies for a single region is less efficient than a single regional policy.

DCreate three packet mirroring policies: one for each zone. Create three groups of collector

Similar to option C, creating three zonal policies and three zonal collector groups is more administratively complex than a single regional policy, even if it helps minimize inter-zonal costs.

Concept tested: Regional Packet Mirroring policy and cost-efficient collector placement

Source: https://cloud.google.com/vpc/docs/packet-mirroring-best-practices

Topics

#Packet Mirroring#Network Security#Cost Optimization#Network Design

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice