Exam Professional Cloud Network Engineer topic 1 question 123 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 123
Topic #: 1

[All Professional Cloud Network Engineer Questions]

Your company's security team wants to limit the type of inbound traffic that can reach your web servers to protect against security threats. You need to configure the firewall rules on the web servers within your Virtual Private Cloud (VPC) to handle HTTP and HTTPS web traffic for TCP only. What should you do?

A. Create an allow on match ingress firewall rule with the target tag “web-server” to allow all IP addresses for TCP port 80.
B. Create an allow on match egress firewall rule with the target tag “web-server” to allow all IP addresses for TCP port 80.
C. Create an allow on match ingress firewall rule with the target tag “web-server” to allow all IP addresses for TCP ports 80 and 443.
D. Create an allow on match egress firewall rule with the target tag “web-server" to allow web server IP addresses for TCP ports 80 and 443.

Show Suggested Answer

Suggested Answer: C 🗳️

by ccieman2016 at Dec. 3, 2022, 12:28 p.m.