GCP-PCNE
Managing, monitoring, and troubleshooting network operations
hard
Question 6 of 25

A security analyst wants to know whether denied traffic is visible in VPC Flow Logs. Which statement is correct?

ADenied ingress and denied egress packets are both always absent from flow logs
BDenied ingress packets can be sampled, but denied egress packets cannot
CDenied egress packets can be sampled before egress firewall evaluation, but denied ingress packets are not sampled because ingress sampling happens after ingress firewall evaluation
DDenied packets are visible only when Packet Mirroring is enabled

More Managing, monitoring, and troubleshooting network operations Questions

25 questions

Full Google Professional Cloud Network Engineer Practice Test

All topics covered

All Google Professional Cloud Network Engineer Questions

Browse by topic

Related Questions

A VM without an external IP needs outbound internet access through a managed NAT service. Which Clou...

easy

You need a one-time diagnostic that analyzes configuration and, for supported paths, can send probe ...

medium

Why might a resource not appear in Network Topology even though it exists in your project?...

medium

Which statement best describes how VPC Flow Logs captures traffic?...

medium

A SOC needs full packet payloads for IDS analysis and wants to send mirrored traffic to collector in...

hard
View all Managing, monitoring, and troubleshooting network operations questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion

Sign InCreate free account