A cloud engineer is deploying ingress VPC firewall rules to allow HTTPS (TCP port 443) traffic from any external client specifically to a set of Compute Engine virtual machine instances labeled with the network tag `web-frontend`. Which TWO parameters or configurations must be included in the firewall rule specification to achieve this requirement? (Select TWO)
- Set the direction to INGRESS and specify the source IPv4 ranges as 0.0.0.0/0.Cevap
- Specify the target tags parameter as `web-frontend` and set the allowed protocol and port to tcp:443.Cevap
- CSet the rule priority value to 65535 so that it takes precedence over lower numbered rules.
- DAssign the Project Owner primitive role to the Compute Engine default service account to enable network traffic routing.
Cevap
The correct configurations are setting the rule direction to INGRESS with source ranges 0.0.0.0/0, and specifying the target tags as `web-frontend` with allowed protocol and port tcp:443.
To allow external HTTPS traffic to targeted instances, a VPC firewall rule must specify INGRESS direction with source range 0.0.0.0/0, match target tag `web-frontend`, and allow protocol and port tcp:443. These parameters correctly scope the traffic origin, destination instances, and permitted network port.
Adım Adım Çözüm
Anahtar Kavram
Configuring GCP VPC Ingress Firewall Rules with Target Network Tags and Port Restrictions