Examkin

Soru

Zorluk: KolayManaging Networking Resources

A network administrator configures two ingress firewall rules for a Google Cloud Virtual Private Cloud (VPC) network targeting the same Compute Engine instance. The first rule, named allow-web, allows TCP traffic on port 80 with a priority of 1000. The second rule, named deny-web, denies TCP traffic on port 80 with a priority of 500. When TCP traffic on port 80 arrives at the instance, which firewall rule determines how the traffic is handled?

  1. The deny-web rule, because lower numerical values specify higher evaluation priority in Google Cloud firewall rules.Cevap
  2. B
    The allow-web rule, because higher numerical values specify higher evaluation priority in Google Cloud firewall rules.
  3. C
    The allow-web rule, because allow rules automatically override deny rules regardless of their assigned priorities.
  4. D
    Neither rule, because rules with conflicting actions matching the same port cancel each other out.

Cevap

The deny-web rule determines how traffic is handled because lower numerical values specify higher evaluation priority in Google Cloud VPC firewall rules.
The correct response explains that the deny-web rule takes effect because in Google Cloud VPC firewall rules, lower priority numbers have higher precedence (priority 0 to 65535, where 0 is highest). Priority 500 is evaluated before priority 1000.

Adım Adım Çözüm

1
Identify the numerical priorities of the matching firewall rules.
The rule allow-web has a priority of 1000, while deny-web has a priority of 500.
Firewall evaluation in GCP depends strictly on numerical priority ranking.
2
Apply Google Cloud firewall rule priority logic.
In GCP, lower priority numbers take precedence over higher priority numbers (0 is the highest priority, 65535 is the lowest).
Priority 500 is evaluated before priority 1000.
3
Determine the winning action.
Because deny-web (priority 500) is evaluated first and matches the incoming traffic, the packet is denied immediately.
Evaluation stops at the first matching rule in the priority order.

Anahtar Kavram

Google Cloud VPC Firewall Rule Priority Ordering
Bu soruyu puanla

Konular

Managing Networking Resources

Bu konudan daha fazla soru