Google Professional Cloud Network Engineer
Comments
Loading comments...
Ultimate access to all questions.
You are implementing firewall controls to protect your compute resources in a newly created VPC. To simplify management and control, you've configured hierarchical firewall policies (bound at the organization level), global network firewall policies (enforcing IPS for external traffic), and VPC firewall rules (allowing RFC 1918 internal communication). The VPC firewall also includes an explicit deny rule with logging enabled.
This setup works in existing VPCs, but in a newly created VPC, logs are missing, external traffic is failing, and internal traffic functions normally. How do you resolve the connectivity issue?
A
Create a new VPC and migrate existing resources to the new VPC. Delete the old VPC, and reapply the firewall policies and rules in the newVPC.
B
Raise the priority numbers of the firewall policy rules and lower the priority numbers of the VPC firewall rules.
C
Review the order in which the VPC firewall rules and policies are evaluated. If the VPC firewall rules are being evaluated before firewall policies, switch the order.
D
Lower the priority numbers of the firewall policy rules and raise the priority numbers of the VPC firewall rules.