Practice Test 2 | Google Cloud Certified Professional Cloud DevOps Engineer | Dumps | Mock Test
Your company has deployed compute resources in VPCs. There are three VPCs in the Development Project and applications are deployed to GCE Instances in the VPCs. There is a new security requirement to collect sample network flows sent to and received by the VM instances.
Which of the following can help you achieve this?
A. Deploy the FluentD agent to instances so application logs can be sent to Cloud Logging
B. Create a Logs Sink with an inclusion filter to sample traffic in the VPCs.
C. Enable Firewall logs on the firewall rules affecting instances deployed to the VPCs.
D. Enable VPC Flow Logs in the subnets where there are instances
Corrcet Answer: D
- Option A is incorrect. The FluentD agent is useful for application and OS specific logs not the network traffic in the VPC.
- Option B is incorrect. This will only work after the VPC Flow logs has been enabled
- Option Cis incorrect. This is used to capture traffic allowed or denied on a particular firewall rule.
- Option D is CORRECT. VPC Flow Logs record a sample of network flows sent from and received by VM instances, including instances used as GKE nodes. These logs can be used for network monitoring, forensics, real-time security analysis, and expense optimization.
Reference:
Comments are closed, but trackbacks and pingbacks are open.