Practice Test 2 | Google Cloud Certified Professional Cloud DevOps Engineer | Dumps | Mock Test
You are the on-call SRE for a betting company. You are managing an application deployed on App Engine flexible environment within a custom VPC. The application accepts user traffic from anywhere using HTTPS. You have been tasked with logging all successful incoming SSH traffic to the GCE instances from the company network.
How will you achieve this?
A. Create a firewall rule that denies ingress traffic on Port 22 from the company network to the VPC network and turn on Logs .
B. Create a firewall rule that allows ingress traffic on Port 22 from the company network to the VPC network and turn on Logs.
C. Create a firewall rule that denies egress traffic on Port 22 from the company network to the VPC network and turn on Logs.
D. Create a firewall rule that allows egress traffic on Port 22 from the company network to the VPC network and turn on Logs.
Corrcet Answer: B
- Option A is incorrect. The firewall should allow ingress (incoming) not deny.
- Option B is CORRECT. The firewall rule should allow ingress (incoming) traffic on port 22 (SSH) and logging should be turned on, so the logs appear in Cloud Logging
- Options C and D are incorrect. The firewall should affect ingress (incoming) not egress (outgoing).
Reference:
Comments are closed, but trackbacks and pingbacks are open.