You are troubleshooting connectivity issues between Google Cloud and a public SaaS provider. Connectivity between the two environments is through the public internet. Your users are reporting…

Question

Options

• AEnable and review Cloud Logging for Cloud Armor. Look for logs with errors matching the
• BEnable and review Cloud Logging on your Cloud NAT gateway. Look for logs with errors
• CEnable the Firewall Insights API. Set the deny rule insights observation period to one day.
• DCreate a Connectivity Test by using TCP, the source IP address of your test VM, and the

• A
  6% (1)
• B
  6% (1)
• C
  18% (3)
• D
  71% (12)

Explanation

Google Cloud's Connectivity Tests tool provides detailed insights into network paths and issues between Google Cloud resources and external endpoints. By creating a TCP-based connectivity test to the destination IP address of the SaaS provider, the engineer can: - Analyze the full network path, including routing and firewall rules within Google Cloud. - Identify issues such as misconfigured routes, firewalls, or NAT gateways. - Gain insights into live traffic flows, which can help diagnose intermittent connectivity errors. Since ICMP is working, the issue may be protocol-specific (TCP). Connectivity Tests allow you to specifically test TCP connections and analyze the results, providing the most actionable insights for troubleshooting. This approach directly targets the problem and helps narrow down the root

No community discussion yet for this question.