Practice Test 2 | Google Cloud Certified Associate Cloud Engineer | Dumps | Mock Test
Under what scenario will you prefer using tag or service account with firewall instead of using IP address?
A. Tag or service account can prevent from network sniffing attacks.
B. Tag or service account are much safer compared to using IP address.
C. Any instance launched using tag or service account will have firewall attached automatically.
D. None of the above.
Explanation:
Answer C
Option C is correct: Using tag or service account will keep your firewall rule tidy as easy to understand because if you have to apply the same rule to hundreds of instances imagine going through each and every instance and adding their IP in the source. Instead, you can just use common tag or service account among VMs.
Option A is incorrect: This is an invalid choice because it does not prevent from network sniffing attack.
Option B is incorrect: Using IP address instead will be as safer as using tag or service account.
Option D is incorrect: As correct answer is option C, this is an invalid choice.
Link:
https://cloud.google.com/vpc/docs/firewalls#service-accounts-vs-tags
Comments are closed, but trackbacks and pingbacks are open.