Practice Test 2 | Google Cloud Certified Professional Cloud DevOps Engineer | Dumps | Mock Test
You are part of the DevOps team that manages applications running in the production project of your company. After a recent security incident, there was a new requirement to catch network traffic going to and from the Compute instances in the VPCs in the production project. VPC Flow Logs was enabled on the production VPC and no vpc_flows logs are present in Cloud Logging.
Which of the following could be the reason?
A. Logging Inclusion filters could be blocking the vpc_flows log
B. VPC Flow logs was configured incorrectly.
C. The service account for the instances has insufficient permissions.
D. Logging Exclusion filters could be blocking the vpc_flows log
Corrcet Answer: D
- Option A is incorrect. Logging inclusion filter does not block any log from being sent.
- Option B is incorrect. There is no configuration needed for enabling VPC Flow Logs.
- Option C is incorrect. The service account of the instances is not used in capturing VPC Flow Logs.
- Option D is CORRECT. Logging exclusion filters block specified logs. Make sure there are no exclusion rules that discard VPC Flow Logs.
Reference:
Comments are closed, but trackbacks and pingbacks are open.