Google Professional Cloud DevOps Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
As the on-call Site Reliability Engineer (SRE) for a growing media company, you're responsible for an application deployed on Compute Engine within a custom VPC. This application handles user traffic globally via HTTPS. Your task is to log all failed incoming SSH traffic to the Google Compute Engine (GCE) instances. What is the correct approach to achieve this?
A
Establish a firewall rule permitting egress traffic on Port 22 from any source to the VPC network and enable logging.
B
Implement a firewall rule blocking ingress traffic on Port 22 from any source to the VPC network and enable logging.
C
Set up a firewall rule allowing ingress traffic on Port 22 from any source to the VPC network and enable logging.
D
Create a firewall rule prohibiting egress traffic on Port 22 from any source to the VPC network and enable logging.