Exam Professional Cloud Network Engineer topic 1 question 224 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 224
Topic #: 1

[All Professional Cloud Network Engineer Questions]

You have recently taken over responsibility for your organization's Google Cloud network security configurations. You want to review your Cloud Next Generation Firewall (Cloud NGFW) configurations to ensure that there are no rules allowing ingress traffic to your VMs and services from the internet. You want to avoid manual work. What should you do?

A. Export all your Cloud NGFW rules into a CSV file and search for 0.0.0.0/0.
B. Use Firewall Insights, and enable insights for Overly permissive rules.
C. Run Connectivity Tests from multiple external sources to confirm that traffic is not allowed to ingress to your most critical services in Google Cloud.
D. Review Network Analyzer insights on the VPC network category.

Show Suggested Answer

Suggested Answer: B 🗳️

by 1f01b87 at March 15, 2025, 8:58 p.m.

Comments

Submit Cancel

n2183712847

1 month, 2 weeks ago

Selected Answer: B

Firewall Insights with the "Overly permissive rules" insight provides the most automated, targeted, and efficient way to review your Cloud NGFW configurations and identify rules that allow ingress traffic from the internet.

upvoted 1 times

...

1f01b87

3 months ago

Selected Answer: B

B is correct

upvoted 1 times

...