You have the following Shared VPC design. VPC Flow Logs is configured for Subnet-1 in the host VPC. You also want to monitor flow logs for Subnet-2. What should you do?
A.
Configure a VPC Flow Logs filter for Subnet-2 in the host project VPC.
B.
Configure VPC Flow Logs in the service project VPC for Subnet-2.
C.
Configure Packet Mirroring in both the host and service project VPCs.
D.
Configure a firewall rule to permit Subnet-2 IP addresses outbound in the host project VPC.
A compute engine can't have multiple NICs in the same VPC, so in the figure the VPCs are two (even if with the same name), one in the host project and one in the service project. So the answer is B
A Shared VPC network is a VPC network defined in a host project and made available as a centrally shared network for eligible resources in service projects
It's B. Service project has it's own VPC where the Subnet-2 is located and it has nothing to do with Host Project and Shared VPC.
If the Subnet-2 was the part of Host project Shared VPC then correct answer would be B.
A Shared VPC network is a VPC network defined in a host project and made available as a centrally shared network for eligible resources in service projects
"In Shared VPC networks, logs only appear in the host project, not the service projects. Make sure you look for the logs in the host project."
https://cloud.google.com/vpc/docs/using-flow-logs
I go with A
you cannot configure a VPC Flow Logs filter for Subnet-2 in the host project VPC if the flow logs are already enabled for Subnet-1. Flow logs must be enabled for each individual subnet, and VPC Flow Logs are scoped to specific subnets.
Option B is incorrect because logs for VPC Flow Logs do not appear in the service projects in a Shared VPC setup.
Option C is unrelated to monitoring flow logs and would not achieve the desired result.
Option D is also unrelated to monitoring flow logs and would not achieve the desired result.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Cris0303
Highly Voted 11 months, 2 weeks agomaverick89
10 months, 2 weeks agod07d3be
Most Recent 5 months, 2 weeks ago832f53c
8 months agonkastanas
9 months agoanshad666
10 months agodesertlotus1211
1 year, 1 month agozzaric
1 year, 1 month agozzaric
1 year, 1 month agogonlafer
1 year, 2 months agoPeppaPig
1 year, 2 months agodesertlotus1211
1 year, 1 month agodesertlotus1211
1 year, 1 month agodesertlotus1211
1 year, 1 month agoPeppaPig
7 months, 3 weeks ago[Removed]
1 year, 2 months agoppandher
4 months ago[Removed]
1 year, 2 months ago