Answer-first summary for fast verification
Answer: The traffic is not matching the expected ingress rule.
The issue arises when the external resource initiates communication (ingress traffic to the VM). Firewall logs only capture traffic that matches explicit firewall rules (allow or deny). Since there are no denied entries in the logs, the traffic is likely blocked by the default implicit deny (no matching allow rule), which does not generate logs. The absence of logs indicates the traffic isn't matching any expected ingress rule (e.g., a misconfigured or missing allow rule for the external resource). This explains why the logs don't show denied traffic and why the application cannot receive the external communication.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
An application running on a Compute Engine VM instance cannot communicate with an external resource outside its subnet. Flow logs and firewall logs show no denied traffic. Troubleshooting reveals:
What is the most probable reason for the absence of log entries?
A
The traffic is matching the expected ingress rule.
B
The traffic is matching the expected egress rule.
C
The traffic is not matching the expected ingress rule.
D
The traffic is not matching the expected egress rule.
No comments yet.