PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #186
You have been tasked with inspecting IP packet data for invalid or malicious content. What should you do?
The correct answer is A. Use Packet Mirroring to mirror traffic to and from particular VM instances. Perform inspection. https://cloud.google.com/vpc/docs/packet-mirroring Packet Mirroring clones the traffic of specified instances in your Virtual Private Cloud (VPC) network and forwards it for examination. Packet Mirroring captures all traffic and packet data, including payloads and headers.
Question
Options
- AUse Packet Mirroring to mirror traffic to and from particular VM instances. Perform inspection
- BEnable VPC Flow Logs for all subnets in the VPC. Perform inspection on the Flow Logs data
- CConfigure the Fluentd agent on each VM Instance within the VPC. Perform inspection on the log
- DConfigure Google Cloud Armor access logs to perform inspection on the log data.
How the community answered
(24 responses)- A92% (22)
- B4% (1)
- D4% (1)
Explanation
https://cloud.google.com/vpc/docs/packet-mirroring Packet Mirroring clones the traffic of specified instances in your Virtual Private Cloud (VPC) network and forwards it for examination. Packet Mirroring captures all traffic and packet data, including payloads and headers.
Topics
Community Discussion
No community discussion yet for this question.