Practice Test 1 | Google Cloud Certified Associate Cloud Engineer | Dumps | Mock Test
You have been asked to create VPC for a two-tier architecture for the frontend and backend of the application. Additionally, you need to make sure that backend instances are only reachable via frontend instances. What is the best approach to achieve this?
A. Add labels to your frontend instances and use the same labels as source tags while creating firewall rules for backend instances.
B. Add network tags to your frontend instances and use them under the targets section while creating a firewall for backend instance.
C. Select the service account attached to your frontend instance as a source filter while creating a firewall.
D. While creating a firewall, provide the IP address of frontend instance as a source filter and attach it to backend instance.
Explanation:
Correct Answer – C
Option C is correct: Just provide the service account attached to your frontend instance as a source filter for backend firewall and every instance launched in the future will be able to access it without additional changes.
Option A is incorrect: Labels are just an option to tag VMs or other resources. They cannot be used as a source filter for the firewall rule.
Option B is incorrect: You need to add network tags of frontend instances under source filter for backend firewall, instead of providing it under targets.
Option D is incorrect: Providing the individual IP address of frontend instance will work but is not a scalable solution. With this option, every time a new frontend instance is added, you will need to update the firewall rules.
Reference:
Comments are closed, but trackbacks and pingbacks are open.