Soru

Zorluk: KolayDeploying Virtual Private Cloud (VPC) Networks, Subnets, and Firewall Rules

An organization has two VPC firewall rules applied to a Compute Engine virtual machine instance. Rule A has a priority of 100 and is set to DENY ingress traffic on port 22. Rule B has a priority of 1000 and is set to ALLOW ingress traffic on port 22. Which firewall rule takes precedence when SSH traffic targets the instance?

  1. Rule A takes precedence because in Google Cloud VPC firewall rules, lower priority numbers take higher precedence.Cevap
  2. B
    Rule B takes precedence because higher numerical priority values override lower numerical priority values in Google Cloud.
  3. C
    Rule B takes precedence because ALLOW rules automatically override DENY rules regardless of priority settings.
  4. D
    Both rules are evaluated simultaneously, and traffic is permitted because primitive network roles favor connectivity.

Cevap

Rule A takes precedence because in Google Cloud VPC firewall rules, lower priority numbers take higher precedence.
In Google Cloud VPC firewall rule ordering, priority is an integer from 0 to 65535, where lower numbers specify higher precedence. Rule A has a priority of 100, which is smaller (higher priority) than Rule B's priority of 1000, so Rule A is evaluated first and DENYs the traffic.

Adım Adım Çözüm

1
Identify the numerical priority values of the competing firewall rules
Rule A has a priority value of 100, and Rule B has a priority value of 1000.
Firewall evaluation in GCP depends primarily on numerical priority order.
2
Apply Google Cloud VPC firewall priority evaluation logic
Lower integer values denote higher evaluation precedence (0 is highest priority, 65535 is lowest).
Priority 100 is smaller than 1000, so Rule A is evaluated first.
3
Determine the outcome of the evaluation
Rule A (DENY) matches incoming SSH traffic on port 22 and blocks the connection before Rule B is considered.
Once a matching firewall rule of higher precedence is encountered, it is enforced.

Anahtar Kavram

GCP VPC Firewall Rule Priority Precedence
Tahmini Süre:45s
Bu soruyu puanla