Your company uses the Firewall Insights feature in the Google Network Intelligence Center. You have several firewall rules applied to Compute Engine instances. You need to evaluate the efficiency of the applied firewall ruleset. When you bring up the Firewall Insights page in the Google Cloud Console, you notice that there are no log rows to display. What should you do to troubleshoot the issue?
Choose an answer
Tap an option to check your answer.
Correct answer: Enable Firewall Rules Logging for the firewall rules you want to monitor..
Why this is the answer
Firewall Insights relies on Firewall Rules Logging to gather data about firewall rule usage. If Firewall Insights shows no log rows, it indicates that the necessary logging is not enabled. Enabling Firewall Rules Logging for the specific rules you want to monitor will allow Firewall Insights to collect and display the relevant data, providing visibility into rule efficiency. Enabling VPC flow logging is incorrect because while it captures network flow information, Firewall Insights specifically uses Firewall Rules Logging for its analysis. Verifying IAM roles is incorrect because while permissions are crucial, the absence of log data points to a logging configuration issue, not a permission problem preventing data display. Installing the Cloud SDK and checking command-line output is incorrect because the issue is a lack of data generation, not how it's accessed; the console would show data if it existed.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed