Google Professional Cloud Architect
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
You have a Virtual Private Cloud (VPC) network in Google Cloud where all your Compute Engine instances need to connect to an Active Directory server on specific ports. However, you want to block any other type of outbound traffic emerging from your instances. To enforce this policy, you decide to use VPC firewall rules. How should you configure the firewall rules to achieve this?
A
Create an egress rule with priority 1000 to deny all traffic for all instances. Create another egress rule with priority 100 to allow the Active Directory traffic for all instances.
B
Create an egress rule with priority 100 to deny all traffic for all instances. Create another egress rule with priority 1000 to allow the Active Directory traffic for all instances.
C
Create an egress rule with priority 1000 to allow the Active Directory traffic. Rely on the implied deny egress rule with priority 100 to block all traffic for all instances.
D
Create an egress rule with priority 100 to allow the Active Directory traffic. Rely on the implied deny egress rule with priority 1000 to block all traffic for all instances.