Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Network Engineer Exam - Topic 3 Question 125 Discussion

You have the following firewall ruleset applied to all instances in your Virtual Private Cloud (VPC):You need to update the firewall rule to add the following rule to the ruleset:You are using a new user account. You must assign the appropriate identity and Access Management (IAM) user roles to this new user account before updating the firewall rule. The new user account must be able to apply the update and view firewall logs. What should you do?
A) Assign the compute.securityAdmin and logging.viewer rule to the new user account. Apply the new firewall rule with a priority of 50.
B) Assign the compute.securityAdmin and logging.bucketWriter role to the new user account. Apply the new firewall rule with a priority of 150.
C) Assign the compute.orgSecurityPolicyAdmin and logging.viewer role to the new user account. Apply the new firewall rule with a priority of 50.
D) Assign the compute.orgSecurityPolicyAdmin and logging.bucketWriter role to the new user account. Apply the new firewall rule with a priority of 150.

Google Professional Cloud Network Engineer Exam - Topic 3 Question 125 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam
Question #: 125
Topic #: 3
[All Professional Cloud Network Engineer Questions]

You have the following firewall ruleset applied to all instances in your Virtual Private Cloud (VPC):

You need to update the firewall rule to add the following rule to the ruleset:

You are using a new user account. You must assign the appropriate identity and Access Management (IAM) user roles to this new user account before updating the firewall rule. The new user account must be able to apply the update and view firewall logs. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Earleen at Jul 16, 2026, 09:08 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Allene
3 days ago
Wait, can you really apply a firewall rule with a priority of 150? That seems high!
upvoted 0 times
...
Mica
8 days ago
D) sounds off, why would you need bucketWriter for firewall updates?
upvoted 0 times
...
Selma
14 days ago
C) has the right priority but orgSecurityPolicyAdmin? Not sure.
upvoted 0 times
...
Sharee
19 days ago
I think B) is better, bucketWriter is important for logs.
upvoted 0 times
...
Tuyet
24 days ago
A) seems right, securityAdmin is key.
upvoted 0 times
...
Marya
29 days ago
I lean towards option A because it mentions both the securityAdmin and logging.viewer roles, which seem appropriate for viewing logs and applying updates. But I'm not 100% confident.
upvoted 0 times
...
Keshia
1 month ago
I practiced a similar question where we had to assign roles for firewall management. I feel like priority might also play a role in how the rules are applied, but I can't remember the specifics.
upvoted 0 times
...
Felicidad
1 month ago
I think the compute.securityAdmin role is definitely important for updating firewall rules, but I'm confused about the logging roles. Should it be viewer or bucketWriter?
upvoted 0 times
...
Malinda
1 month ago
I'm not entirely sure about the IAM roles needed here. I remember something about needing permissions to view logs, but I can't recall the exact roles.
upvoted 0 times
...

Save Cancel