Topic 1 Question 159
Your product team has web servers running on both us-east1 and us-west1 regions in the prod-servers project. Your security team plans to install an intrusion detection system (IDS) in their own Google Cloud project to inspect the incoming network traffic. What should you do?
Create a new project and a VPC for the security team. Peer the new VPC with the web servers’ VPC in the prod-servers project. Create an internal load balancer and the IDS system in both us-east1 and us-west1. Enable Packet Mirroring, and create packet mirroring policies inside the new project.
Create a host project and a Sharad VPC for the security team. Make prod-servers a service project, and relocate the web servers to shared subnets in both regions. Enable IP forwarding on all the web servers. Create the IDS system in a non-shared subnet of us-east1 or us-west1. Configure the web servers to forward the packets to the IDS system. C. Create a new project and a VPC for the security team. Peer the new VPC with the web servers’ VPC in the prod-servers project. Enable IP forwarding on all the web servers. Install the IDS system in both us-east1 and us-west1. Configure the web servers to forward the packets to the IDS system.
Create a host project and a Shared VPC for the security team. Make prod-servers a service project, and relocate the web servers to shared subnets in both regions. Create an internal load balancer and the IDS system in a subnet in either us-east1 or us-west1. Enable Packet Mirroring, and create a packet mirroring policy inside the host project.
ユーザの投票
コメント(4)
- 正解だと思う選択肢: A
No need of Shared VPC.
👍 2bnba442023/12/21 - 正 解だと思う選択肢: A
An example scenario (somewhat different though) here: https://www.cloudskillsboost.google/focuses/14864?parent=catalog
👍 1ExamQnA2023/12/30 - 正解だと思う選択肢: A
https://cloud.google.com/vpc/docs/packet-mirroring#key_properties
A collector destination must be in the same region as the mirrored sources. A collector destination can be located in either the same VPC network as the mirrored sources or a VPC network connected to the mirrored sources' network using VPC Network Peering.
An example scenario (somewhat different though) here: https://www.cloudskillsboost.google/focuses/14864?parent=catalog
👍 1ExamQnA2023/12/30
シャッフルモード