Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
Your company has an application running on Compute Engine behind an HTTP(S) Load balancer. You are tasked with configuring the Cloud Armor policies. You add two rules to a policy to deny traffic from a CIDR Range with Priority 1000 and allow traffic from the CIDR range with Priority 2000.
Which of the following is the expected outcome?
A. Traffic from the CIDR range is allowed.
B. Traffic from the CIDR range is denied.
C. Nothing happens due to the conflict of rules.
D. Some traffic is allowed, and some is denied from the CIDR range.
Answer: B
- Option A is incorrect. The deny rule has a higher priority of 1000, so it is executed first.
- Option B is CORRECT. The deny rule has a higher priority of 1000, so it is executed first.
- Option C is incorrect. Traffic is either allowed or denied based on the applied rules.
- Option D is incorrect. Traffic is either allowed or denied based on the applied rules.
References:
Comments are closed, but trackbacks and pingbacks are open.