Examkin

Question

Difficulty: EasyDeploying Virtual Private Cloud (VPC) Networks, Subnets, and Firewall Rules

When configuring ingress firewall rules in a Google Cloud Virtual Private Cloud (VPC) network, multiple rules may match incoming network traffic. How does Google Cloud determine which firewall rule takes precedence when two matching rules conflict?

  1. The rule with the lower numerical priority value takes precedence and is evaluated first.Answer
  2. B
    The rule with the higher numerical priority value takes precedence and is evaluated first.
  3. C
    Rules applied to specific subnets automatically override VPC-level rules regardless of priority numbers.
  4. D
    ALLOW rules always take precedence over DENY rules regardless of their assigned priority numbers.

Answer

The rule with the lower numerical priority value takes precedence and is evaluated first.
In Google Cloud VPC, firewall rule priority is an integer from 0 to 65535. Rules with lower numerical priority values are evaluated first. Once a rule matches traffic, lower priority (higher numbered) rules are not evaluated.

Step-by-Step Solution

1
Identify the mechanism GCP uses to resolve conflicting VPC firewall rules.
GCP relies on an integer priority value assigned to each rule, ranging from 0 to 65535.
When network traffic matches multiple rules, GCP processes rules in ascending order of their priority numbers.
2
Determine which numerical priority value indicates higher precedence.
Lower numbers (e.g., 100) are evaluated before higher numbers (e.g., 1000). Priority 0 is the highest possible priority.
The rule with the lower priority integer is applied first; once a matching rule is applied, further evaluation stops for that connection.

Key Concept

GCP VPC Firewall Rule Priority Precedence
Estimated Time:45s
Rate this question

Topics

Deploying Virtual Private Cloud (VPC) Networks, Subnets, and Firewall Rules