Google Professional Cloud Network Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
You are designing a packet mirroring policy for network security in your gaming workload infrastructure, which is deployed across zones us-west2-a, us-west2-b, and us-west2-c in the us-west2 region. The infrastructure hosts a web-based application on TCP ports 80 and 443, along with game servers using UDP. To monitor web application traffic while minimizing inter-zonal egress costs, how should you deploy the packet mirroring policies and collector instances following Google-recommended best practices?
A
Crate three packet mirroring policies: one for each zone. Create one group of collector instances for the us-west2 region. Configure each packet mirroring policy to match traffic for its zone based on instance-tags, and create a filter for TCP traffic.
B
Create one packet mirroring policy for the us-west2 region. Create one group of collector instances for the us-west2 region. Configure the packet mirroring policy to match traffic for web server instances based on instance-tags, and create a filter for TCP traffic.
C
Create three packet mirroring policies: one for each zone. Create three groups of collector instances: one group for each zone. Configure each policy to match traffic for its zone based on instance-tags, and create a filter for TCP traffic.
D
Create three packet mirroring policies: one for each zone. Create three groups of collector instances: one group for each zone. Configure each policy to match traffic for its zone based on subnets, and create a filter for TCP traffic.