Exam Professional Cloud Security Engineer topic 1 question 174 discussion

E is the answer. https://cloud.google.com/vpc/docs/packet-mirroring Packet Mirroring clones the traffic of specified instances in your Virtual Private Cloud (VPC) network and forwards it for examination. Packet Mirroring captures all traffic and packet data, including payloads and headers.

It should be A.. Cloud IDS inspects not only the IP header of the packet, but also the payload. https://cloud.google.com/blog/products/identity-security/how-google-cloud-ids-helps-detect-advanced-network-threats

https://cloud.google.com/vpc/docs/packet-mirroring Packet Mirroring clones the traffic of specified instances in your Virtual Private Cloud (VPC) network and forwards it for examination. Packet Mirroring captures all traffic and packet data, including payloads and headers. The capture can be configured for both egress and ingress traffic, only ingress traffic, or only egress traffic. The mirroring happens on the virtual machine (VM) instances, not on the network. Consequently, Packet Mirroring consumes additional bandwidth on the VMs. Packet Mirroring is useful when you need to monitor and analyze your security status. It exports all traffic, not only the traffic between sampling periods. For example, you can use security software that analyzes mirrored traffic to detect all threats or anomalies. Additionally, you can inspect the full traffic flow to detect application performance issues.

Answer previously would have been E however, I believe this now should be Answer A - Cloud IDS

E. Packet Mirroring allows you to replicate network traffic flowing through your VPCs to a designated destination. This destination can be a dedicated instance or a network analysis tool. With full packet capture, you can inspect the contents of network payloads and headers, providing a deeper level of network traffic analysis compared to just flow logs.

Answer is A: It askes for 'Google Cloud Product'. Cloud IDS includes packet mirroring and built with Palo Alto threat detection. https://www.happtiq.com/cloud-ids/ After an endpoint has been specified, traffic from specific instances is cloned by setting up a packet mirroring policy. All the data from the traffic along with packet data, payloads, and headers is forwarded to Cloud IDS for examination.

E is the answer

cloud IDS is based on packet mirroring and asked for product to analyse. so A is the ans

E Packet Mirroring captures all traffic and packet data, including payloads and headers. The capture can be configured for both egress and ingress traffic, only ingress traffic, or only egress traffic.

Packet Mirroring clones the traffic of specified instances in your Virtual Private Cloud (VPC) network and forwards it for examination. Packet Mirroring captures all traffic and packet data, including payloads and headers. The capture can be configured for both egress and ingress traffic, only ingress traffic, or only egress traffic.

https://cloud.google.com/vpc/docs/packet-mirroring