Exam Professional Cloud Network Engineer topic 1 question 91 discussion

In my opinion A. https://cloud.google.com/blog/products/networking/how-to-use-vpc-flow-logs-in-gcp-for-network-traffic-analysis

Reason: Enabling VPC Flow Logs and sending the output to BigQuery is the most efficient and cost-effective way to identify which VMs are causing the spikes in network utilization. This solution requires minimal management overhead and is built directly into Google Cloud, which is ideal for your use case.

A. Enable VPC Flow Logs and send the output to BigQuery for analysis is the recommended approach to identify the virtual machine (VM) instances and type of traffic causing the spike in traffic utilization while minimizing the cost and management overhead required. VPC Flow Logs provides a way to capture and log network traffic metadata in your Google Cloud VPC. By analyzing VPC Flow Logs in BigQuery, you can obtain insights into network traffic, such as source and destination IP addresses, protocols, and ports, which can help you to identify the VM instances and type of traffic causing the spike in traffic utilization. This approach is cost-effective because VPC Flow Logs are priced based on the amount of data you generate, and it requires no additional hardware or software.

A is correct. Option B, enabling Firewall Rules Logging for all allowed traffic, would not necessarily capture all traffic, as not all traffic may be subject to firewall rules. Additionally, this approach could generate a large amount of log data, which could be costly and difficult to manage. Option C, configuring Packet Mirroring to send all traffic to a VM running Wireshark, would also generate a large amount of data to analyze, and would require setting up additional resources and infrastructure. Option D, deploying a third-party network appliance and configuring it as the default gateway, would also be costly and require additional management overhead.

We dont need Bigquery for traffic analysis, as this is just one time activity and not time series data. Packet mirroring will do. Also, bigquery is expensive and does not meet the criteria of being economical. Hence, C is correct

• A. Enable VPC Flow ***** Logs and send the output to BigQuery for analysis.

BigQuery? Minimising costs?

It's A.

https://cloud.google.com/vpc/docs/using-flow-logs I guess it's A