Courseiva

PCNE Practice Question: Managing, Monitoring, and Optimising Network Operations

A company uses Cloud NAT for outbound internet access from private instances. They want to monitor for connection failures due to NAT resource exhaustion. Which two steps should they take? (Choose two.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Enable Cloud NAT logging

Enable Cloud NAT logging to capture connection and allocation failures. Set up alerts on NAT logs to detect failures. VPC Flow Logs do not capture NAT-specific failures. Firewall Insights are for firewall rules. Packet Mirroring is not relevant.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Enable Cloud NAT logging

    Why this is correct

    Correct: NAT logs record connection and allocation failures.

  • Enable VPC Flow Logs on the subnet

    Why it's wrong here

    Flow Logs show network flows but not NAT allocation failures.

  • Use Packet Mirroring to capture NAT traffic

    Why it's wrong here

    Packet Mirroring copies traffic but not NAT-specific logs.

  • Use Firewall Insights to check for blocked traffic

    Why it's wrong here

    Firewall Insights are for firewall rules, not NAT.

  • Set up log-based metrics and alerts on NAT logs

    Why this is correct

    Correct: Alerts on NAT logs can notify administrators of failures.

Visual reference

Inside (Private) PC-A 10.0.0.1 PC-B 10.0.0.2 NAT Router Outside (Public) 203.0.113.1 Inside Global Server PAT: many private IPs share one public IP via unique port numbers

About these practice questions

One of 961 original PCNE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.