Google Exam Professional Cloud Network Engineer Topic 1 Question 76 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam

Question #: 76
Topic #: 1

[All Professional Cloud Network Engineer Questions]

You suspect that one of the virtual machines (VMs) in your default Virtual Private Cloud (VPC) is under a denial-of-service attack. You need to analyze the incoming traffic for the VM to understand where the traffic is coming from. What should you do?

AEnable Data Access audit logs of the VPC. Analyze the logs and get the source IP addresses from the subnetworks.get field.

BEnable VPC Flow Logs for the subnet. Analyze the logs and get the source IP addresses from the connection field.

CEnable VPC Flow Logs for the VPC. Analyze the logs and get the source IP addresses from the src_location field.

DEnable Data Access audit logs of the subnet. Analyze the logs and get the source IP addresses from the networks.get field.

Show Suggested Answer

Suggested Answer: B

by Annabelle at Feb 10, 2024, 06:12 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Steffanie

8 months ago

I think we should go with option A. Enabling Data Access audit logs of the VPC seems like the most comprehensive approach.

upvoted 0 times

...

James

8 months ago

I'm not sure. Maybe enabling Data Access audit logs of the VPC could also help us pinpoint the source of the attack.

upvoted 0 times

...

Leigha

9 months ago

I agree with Lamar. VPC Flow Logs for the subnet will provide the source IP addresses we need to track the traffic.

upvoted 0 times

...

Lamar

9 months ago

I think enabling VPC Flow Logs for the subnet is the way to go. It will help us analyze the incoming traffic.

upvoted 0 times

...

Art

9 months ago

I'm with you, Earleen. This is gonna be a breeze. Just remember, no matter what, don't panic and keep calm. Panicking is for the weak!

upvoted 0 times

...

Earleen

9 months ago

Alright, I think we've got it figured out. I'm going to go with option B - VPC Flow Logs for the subnet. Can't wait to ace this exam!

upvoted 0 times

...

Kristeen

9 months ago

I don't think options A or D are correct. Auditing the Data Access logs seems like overkill, and the 'networks.get' and 'subnetworks.get' fields don't sound right to me.

upvoted 0 times