Google Cloud Professional Cloud Network Engineer PCNE — Topic 1 Question 253

Question

You manage your company's network security and have noticed unusual outbound traffic from a Compute Engine VM that is part of a production subnet. You suspect the VM may be compromised, because it is attempting to communicate with a malicious external IP address. You want to capture detailed metadata for every IP connection to and from this specific VM. including source/destination IP, port, protocol, and the amount of data transferred. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: • Enable VPC Flow Logs on the subnet containing the VM.• Set the sampling rate to 1.0 for maximum detail, and filter the logs in Cloud Logging for the VM's IP address. A VPC provides a global, software-defined private network for your Google Cloud resources. Cloud Logging centralizes, stores, and analyzes logs across services.

Google Cloud Professional Cloud Network Engineer PCNE — Question 253