An enterprise Cloud Operations team is managing Virtual Private Cloud (VPC) networking resources for a production environment hosted on Google Cloud Platform. The team needs to modify network configurations to accommodate expanding workloads and ensure predictable traffic evaluation. Which of the following statements regarding VPC subnet range expansion and firewall rule priority evaluation are correct? (Select TWO)
- When expanding an existing primary IPv4 subnet CIDR block, the new netmask prefix length must be smaller (broader IP range) than the existing prefix length and cannot overlap with existing subnets in the same VPC network.Cevap
- Google Cloud VPC firewall rule priority evaluation follows an ascending numerical order, meaning a rule with priority 100 takes precedence over a rule with priority 1000.Cevap
- CTo shrink a primary subnet CIDR block when extra IP addresses are no longer needed, an administrator can execute the gcloud compute networks subnets expand-ip-range command with a larger netmask prefix length.
- DTo ensure a newly created ingress firewall rule overrides an existing matching rule assigned priority 500, the new rule must be configured with a priority value of 1500.
Cevap
The correct statements are that primary subnet expansion requires a smaller netmask prefix length without overlapping other subnets in the VPC, and VPC firewall rules process lower numerical priority values first (e.g., priority 100 takes precedence over priority 1000).
Expanding a primary IPv4 subnet requires decreasing the netmask prefix length (making the IP block larger) while ensuring no overlapping CIDR ranges exist within the VPC. In addition, Google Cloud VPC firewall rules process priority values in ascending numerical order, where smaller numbers represent higher priority rules and take precedence during packet evaluation.
Adım Adım Çözüm
Anahtar Kavram
Managing VPC Subnets and Firewall Priorities