A cloud engineer is configuring Virtual Private Cloud (VPC) networks and firewall rules for a project in Google Cloud. Which of the following statements regarding VPC subnet management and firewall rule evaluation order are correct? (Select TWO.)
- The primary IP address range of a custom mode subnet can be expanded without recreating existing virtual machine instances.Cevap
- Firewall rules with lower numerical priority values (such as priority 100) take precedence and are evaluated before rules with higher numerical priority values (such as priority 1000).Cevap
- CFirewall rules with higher numerical priority values (such as priority 1000) take precedence and override rules with lower numerical priority values (such as priority 100).
- DRestricting permissions at an individual subnet level revokes access permissions inherited from higher levels in the GCP resource hierarchy.
Cevap
The primary IP address range of a custom mode subnet can be expanded without recreating existing virtual machine instances, and firewall rules with lower numerical priority values take precedence over higher numerical priority values.
Expanding the primary CIDR range of a custom mode subnet in Google Cloud can be done online without affecting existing virtual machines. Additionally, VPC firewall rules are evaluated by priority in ascending numerical order, meaning lower numbers (e.g., 100) are evaluated first and take precedence over higher numbers (e.g., 1000).
Adım Adım Çözüm
Anahtar Kavram
Custom subnet CIDR expansion and VPC firewall rule priority precedence