Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Architect (PR000213) Exam - Topic 13 Question 40 Discussion

All compute Engine instances in your VPC should be able to connect to an Active Directory server on specific ports. Any other traffic emerging from your instances is not allowed. You want to enforce this using VPC firewall rules.How should you configure the firewall rules?
B) Create an egress rule with priority 100 to deny all traffic for all instances. Create another egress rule with priority 1000 to allow the Active Directory traffic for all instances.
A) Create an egress rule with priority 1000 to deny all traffic for all instances. Create another egress rule with priority 100 to allow the Active Directory traffic for all instances.
C) Create an egress rule with priority 1000 to allow the Active Directory traffic. Rely on the implied deny egress rule with priority 100 to block all traffic for all instances.
D) Create an egress rule with priority 100 to allow the Active Directory traffic. Rely on the implied deny egress rule with priority 1000 to block all traffic for all instances.

Google Professional Cloud Architect (PR000213) Exam - Topic 13 Question 40 Discussion

Actual exam question for Google's Professional Cloud Architect (PR000213) exam
Question #: 40
Topic #: 13
[All Professional Cloud Architect (PR000213) Questions]

All compute Engine instances in your VPC should be able to connect to an Active Directory server on specific ports. Any other traffic emerging from your instances is not allowed. You want to enforce this using VPC firewall rules.

How should you configure the firewall rules?

Show Suggested Answer Hide Answer
Suggested Answer: B

https://cloud.google.com/vpc/docs/firewalls


by Jose at May 03, 2022, 09:44 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect (PR000213) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Leatha
10 months ago
Not sure about that, but I feel like D could work too.
upvoted 0 times
...
Hildred
10 months ago
I agree with C, it’s cleaner to allow specific traffic.
upvoted 0 times
...
Valentin
11 months ago
Wait, why would you deny all first? That sounds risky.
upvoted 0 times
...
Marva
11 months ago
I think B is the way to go, denying first makes more sense.
upvoted 0 times
...
Leota
11 months ago
Option C seems right, allow AD traffic and let the deny do its job.
upvoted 0 times
...
Lashanda
11 months ago
I’m leaning towards option A because it clearly denies all traffic first, but I’m worried I might be mixing up the priorities from other examples we did.
upvoted 0 times
...
Lauran
11 months ago
I feel like option C makes sense since it allows the specific traffic and relies on the implied deny, but I'm not completely confident about the priority numbers.
upvoted 0 times
...
Corazon
11 months ago
I remember practicing a similar question where the priority of the deny rule was crucial. I think it should be higher than the allow rule to block everything else.
upvoted 0 times
...
Veta
11 months ago
I think we need to allow the Active Directory traffic first, but I'm not sure if the priority should be higher or lower for that rule.
upvoted 0 times
...
Harris
11 months ago
Hmm, I'm not entirely sure about this one. The image doesn't give a lot of detail, and I'm not very familiar with the MX Security Appliance. I'll have to think this through carefully and try to eliminate the options that don't seem to fit.
upvoted 0 times
...
Lajuana
11 months ago
Okay, I'm pretty confident the answer is B. "Can Grow". That property sounds like it would let the control resize itself to fit the content, which is what the question is asking about. I'm going to go with that one.
upvoted 0 times
...
Felice
11 months ago
This is a straightforward one. The requirements are clear - we need to ensure the 'Cannot Complete' status can't be changed in a way that would impact the history tracking. I've got this.
upvoted 0 times
...
Arlyne
11 months ago
Hmm, Phase 2 was from 1987-1993. I need to recall which of these was established outside that timeframe.
upvoted 0 times
...
Esteban
11 months ago
I practiced similar problems and I might be leaning towards "13.33%." I remember it having something to do with determining percentages in financial ratios.
upvoted 0 times
...

Save Cancel