
Ultimate access to all questions.
As the on-call Site Reliability Engineer (SRE) for a growing media company, you're responsible for an application deployed on Compute Engine within a custom VPC. This application accepts user traffic globally via HTTPS. Your task is to log all failed incoming SSH traffic to the GCE instances. What is the best approach to achieve this?
A
Create a firewall rule that denies ingress traffic on Port 22 from anywhere to the VPC network and enable logging.
B
Create a firewall rule that allows egress traffic on Port 22 from anywhere to the VPC network and enable logging.
C
Create a firewall rule that allows ingress traffic on Port 22 from anywhere to the VPC network and enable logging.
D
Create a firewall rule that denies egress traffic on Port 22 from anywhere to the VPC network and enable logging.