PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #262
You are troubleshooting connectivity issues between Google Cloud and a public SaaS provider. The connectivity between the two environments is through the public internet. Your users are reporting…
The correct answer is C. Enable and review Cloud Logging on your Cloud NAT Gateway. Look for logs with errors that. Enabling Cloud NAT logging surfaces NAT gateway events, like ephemeral port exhaustion or allocation failures, that can disrupt TCP sessions without affecting ICMP. Reviewing those logs for your SaaS provider’s destination IP around the error window will reveal whether Cloud…
Question
Options
- ACreate a Connectivity Test. Review the results for configuration issues in the VPC routing table.
- BEnable and review Cloud Logging for Cloud Armor. Look for logs with errors that match the
- CEnable and review Cloud Logging on your Cloud NAT Gateway. Look for logs with errors that
- DEnable the Firewall Insights API. Set the Deny rule insights observation period to one day.
How the community answered
(46 responses)- A2% (1)
- B11% (5)
- C83% (38)
- D4% (2)
Explanation
Enabling Cloud NAT logging surfaces NAT gateway events, like ephemeral port exhaustion or allocation failures, that can disrupt TCP sessions without affecting ICMP. Reviewing those logs for your SaaS provider’s destination IP around the error window will reveal whether Cloud NAT is dropping or throttling connections, giving you direct insight into intermittent outbound TCP
Topics
Community Discussion
No community discussion yet for this question.