Examkin

Soru

Zorluk: ZorManaging Networking Resources

A network administrator is updating an existing VPC firewall rule named `allow-app-traffic` in Google Cloud. The rule currently has an evaluation priority of 2000. The administrator needs to modify `allow-app-traffic` to allow incoming TCP traffic on port 8080 from the CIDR block `10.150.0.0/16` specifically for virtual machine instances tagged with `app-backend`. Additionally, this rule must take precedence over a conflicting denial rule configured with a priority of 1500.

Which TWO operational actions must the administrator perform to satisfy these requirements?

  1. Execute `gcloud compute firewall-rules update allow-app-traffic --allow=tcp:8080 --source-ranges=10.150.0.0/16 --target-tags=app-backend` to apply the updated matching criteria.Cevap
  2. Update the rule's priority flag to a value lower than 1500 (such as `--priority=1000`) so that it is evaluated before the conflicting denial rule.Cevap
  3. C
    Update the rule's priority flag to a value higher than 1500 (such as `--priority=3000`) so that it overrides the conflicting denial rule.
  4. D
    Execute `gcloud compute networks subnets update allow-app-traffic --allow=tcp:8080 --target-tags=app-backend` to enforce the filtering policy directly at the subnet layer.

Cevap

To successfully reconfigure the firewall policy, the administrator must use `gcloud compute firewall-rules update allow-app-traffic` with `--allow=tcp:8080`, `--source-ranges=10.150.0.0/16`, and `--target-tags=app-backend`, while lowering the rule priority value to a number below 1500 (such as 1000).
The correct requirements involve updating the firewall rule attributes using the `gcloud compute firewall-rules update` command with the appropriate target tags, allowed port parameters, and CIDR ranges. In addition, because Google Cloud evaluates firewall rules from lowest numerical priority to highest numerical priority, setting the rule's priority to a value less than 1500 (such as 1000) ensures it is matched and enforced prior to the conflicting rule at priority 1500.

Adım Adım Çözüm

1
Identify the proper command context and flags for modifying existing VPC firewall rules.
Confirm that `gcloud compute firewall-rules update` must be used to adjust the allowed ports, source IP ranges, and target instance tags.
Firewall rules exist at the VPC network level, not at the subnet resource level.
2
Evaluate the firewall rule priority logic relative to the conflicting rule.
Determine that the priority must be set to a integer strictly less than 1500 (e.g., 1000).
GCP evaluates firewall rules in ascending order of their priority numbers (0 to 65535). Lower numbers represent higher precedence.

Anahtar Kavram

VPC Firewall Rule Management and Priority Evaluation
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Managing Networking Resources

Bu konudan daha fazla soru