Google
PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #99
Your organization has a new security policy that requires you to monitor all egress traffic payloads from your virtual machines in region us-west2. You deployed an intrusion detection system (IDS)…
The correct answer is C. Create an internal TCP/UDP load balancer for Packet Mirroring, and add a packet mirroring policy. IDS requires at least 1 packet mirroring policy attached to it. https://cloud.google.com/intrusion-detection-system/docs/overvie https://cloud.google.com/vpc/docs/packet-mirroring
Submitted by deeparc· Apr 18, 2026Implementing network security
Question
Your organization has a new security policy that requires you to monitor all egress traffic payloads from your virtual machines in region us-west2. You deployed an intrusion detection system (IDS) virtual appliance in the same region to meet the new policy. You now need to integrate the IDS into the environment to monitor all egress traffic payloads from us-west2. What should you do?
Options
- AEnable firewall logging, and forward all filtered egress firewall logs to the IDS.
- BEnable VPC Flow Logs. Create a sink in Cloud Logging to send filtered egress VPC Flow Logs to
- CCreate an internal TCP/UDP load balancer for Packet Mirroring, and add a packet mirroring policy
- DCreate an internal HTTP(S) load balancer for Packet Mirroring, and add a packet mirroring policy
How the community answered
(36 responses)- A19% (7)
- B8% (3)
- C69% (25)
- D3% (1)
Explanation
IDS requires at least 1 packet mirroring policy attached to it. https://cloud.google.com/intrusion-detection-system/docs/overvie https://cloud.google.com/vpc/docs/packet-mirroring
Topics
#Packet Mirroring#Network Monitoring#IDS Integration#Egress Traffic Security
Community Discussion
No community discussion yet for this question.