Imagine you're the on-call Site Reliability Engineer (SRE) for a betting company, managing an application deployed on App Engine flexible environment within a custom VPC. This application accepts user traffic globally via HTTPS. Your task is to log all successful incoming SSH traffic to the Google Compute Engine (GCE) instances originating from the company network. How would you accomplish this?

Real Exam

Establish a firewall rule permitting egress traffic on Port 22 from the company network to the VPC network and enable logging.

Set up a firewall rule blocking egress traffic on Port 22 from the company network to the VPC network and enable logging.

Implement a firewall rule allowing ingress traffic on Port 22 from the company network to the VPC network and enable logging.

Create a firewall rule denying ingress traffic on Port 22 from the company network to the VPC network and enable logging.

Google Professional Cloud DevOps Engineer