Deploy packet mirroring and collectors in us-west2 (zones us-west2-a/b/c) to monitor web (TCP 80/443) traffic while minimizing inter-zone egress. Which deployment follows Google best practices?

The correct deployment uses one regional packet mirroring policy and one regional collector group, matching web server instances by instance tags and filtering TCP traffic. This aligns with Google best practices by simplifying management with a single policy across zones and minimizing inter-zone egress. Packet mirroring policies can be regional, allowing them to span multiple zones within a region. Collector groups can also be regional, enabling them to receive mirrored traffic from any zone in the region. Matching by instance tags is a flexible and scalable way to target specific web servers. Creating multiple zone-specific policies or collector groups would increase management overhead and potentially lead to higher inter-zone egress costs if collectors are not optimally placed. Matching by subnet is less granular than instance tags and might capture unintended traffic.