nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #246

You are troubleshooting an application in your organization's Google Cloud network that is not functioning as expected. You suspect that packets are getting lost somewhere. The application sends…

The correct answer is B. Enable VPC Flow Logs on the subnet that the VM is deployed in with SAMPLE_RATE = 1.0, and. To troubleshoot packet loss and verify if packets are being sent correctly from the VM to the on- premises destination, enabling VPC Flow Logs is the recommended approach. VPC Flow Logs capture metadata about the traffic flow to and from the VM, including source and destination…

Submitted by hassan_iq· Apr 18, 2026Configuring network services

Question

You are troubleshooting an application in your organization's Google Cloud network that is not functioning as expected. You suspect that packets are getting lost somewhere. The application sends packets intermittently at a low volume from a Compute Engine VM to a destination on your on-premises network through a pair of Cloud Interconnect VLAN attachments. You validated that the Cloud Next Generation Firewall (Cloud NGFW) rules do not have any deny statements blocking egress traffic, and you do not have any explicit allow rules. Following Google- recommended practices, you need to analyze the flow to see if packets are being sent correctly out of the VM to isolate the issue. What should you do?

Options

  • ACreate a packet mirroring policy that is configured with your VM as the source and destined to a
  • BEnable VPC Flow Logs on the subnet that the VM is deployed in with SAMPLE_RATE = 1.0, and
  • CVerify the network/attachment/egress_dropped_packets_count Cloud Interconnect VLAN
  • DEnable Firewall Rules Logging on your firewall rules and review the logs.

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    78% (14)
  • C
    17% (3)

Explanation

To troubleshoot packet loss and verify if packets are being sent correctly from the VM to the on- premises destination, enabling VPC Flow Logs is the recommended approach. VPC Flow Logs capture metadata about the traffic flow to and from the VM, including source and destination IPs, ports, protocols, and whether traffic was allowed or denied. By setting the SAMPLE_RATE to 1.0, you capture all traffic flows for comprehensive analysis, minimizing the chance of missing any intermittent packet flow. Logs Explorer allows you to query and analyze these logs to identify potential issues, such as dropped packets or routing problems. This approach aligns with Google-recommended practices for network troubleshooting, providing detailed insights without requiring additional infrastructure like packet mirroring, which may introduce complexity and resource overhead.

Topics

#VPC Flow Logs#Network Troubleshooting#Packet Analysis#Compute Engine Networking

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice