Google Exam Professional-Cloud-Architect Topic 13 Question 40 Discussion

Actual exam question for Google's Google Cloud Architect Professional exam

Question #: 40
Topic #: 13

[All Google Cloud Architect Professional Questions]

All compute Engine instances in your VPC should be able to connect to an Active Directory server on specific ports. Any other traffic emerging from your instances is not allowed. You want to enforce this using VPC firewall rules.

How should you configure the firewall rules?

ACreate an egress rule with priority 1000 to deny all traffic for all instances. Create another egress rule with priority 100 to allow the Active Directory traffic for all instances.

BCreate an egress rule with priority 100 to deny all traffic for all instances. Create another egress rule with priority 1000 to allow the Active Directory traffic for all instances.

CCreate an egress rule with priority 1000 to allow the Active Directory traffic. Rely on the implied deny
egress rule with priority 100 to block all traffic for all instances.

DCreate an egress rule with priority 100 to allow the Active Directory traffic. Rely on the implied deny egress rule with priority 1000 to block all traffic for all instances.

Show Suggested Answer

Suggested Answer: B

https://cloud.google.com/vpc/docs/firewalls

by Jose at May 03, 2022, 09:44 AM

Limited Time Offer

25%

Off

Get Premium Professional-Cloud-Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!