Network intelligence tools in GCP - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

Understanding VPC Flow Logs Behavior

You enable VPC Flow Logs on a Google Cloud VPC subnet. What information will you NOT see in the flow logs?

A Source and destination IP addresses of the traffic

B Payload content of the packets

C Protocol and port numbers used

D Bytes and packets count for each flow

💡 Hint

Think about what flow logs capture versus packet capture tools.

VPC Flow Logs capture metadata about network traffic, such as IPs, ports, protocols, and counts, but they do NOT capture the actual payload content of packets.

❓ Architecture

intermediate

Choosing the Right Network Intelligence Tool for Latency Analysis

You want to analyze latency and packet loss between your Google Cloud VM instances across regions. Which GCP tool should you use?

A Cloud Trace

B Cloud Logging

C Network Intelligence Center Connectivity Tests

D Cloud Armor

💡 Hint

Consider which tool tests network paths and connectivity.

Network Intelligence Center Connectivity Tests can simulate and analyze network paths, measuring latency and packet loss between endpoints.

❓ security

advanced

Interpreting Firewall Rule Impact with Network Intelligence Center

You run a Connectivity Test between two VM instances but the test fails. You suspect a firewall rule is blocking traffic. Which feature of Network Intelligence Center helps you identify the exact firewall rule causing the block?

A Reachability Analysis

B Packet Mirroring

C Cloud IDS

D Flow Logs Viewer

💡 Hint

Look for a tool that analyzes network paths and policy impact.

Reachability Analysis simulates network paths and shows which firewall or route is blocking traffic.

✅ Best Practice

advanced

Optimizing Network Intelligence Center Usage for Large Environments

In a large Google Cloud environment with many VPCs and subnets, what is the best practice to efficiently monitor network health using Network Intelligence Center?

A Use automated scripts to create and manage Connectivity Tests for critical paths only

B Create Connectivity Tests for every possible VM pair manually

C Enable VPC Flow Logs on all subnets and ignore Connectivity Tests

D Rely solely on Cloud Logging for network issues

💡 Hint

Think about scalability and focusing on important network paths.

Manually creating tests for every VM pair is not scalable. Automating tests for critical paths ensures efficient monitoring.

🧠 Conceptual

expert

Analyzing Network Topology Changes with Network Intelligence Center

You want to detect and visualize changes in your Google Cloud network topology over time. Which Network Intelligence Center feature provides this capability?

A Packet Mirroring

B Connectivity Tests

C Firewall Insights

D Network Topology

💡 Hint

Look for a feature that shows network layout and changes visually.

Network Topology in Network Intelligence Center visualizes your network and tracks changes over time.