ExpertGCP ACE · Question 30 · Domain 3.5: Deploying and implementing networking resources
You have a VPC network with two sets of Compute Engine instances: Web servers and Database servers. You want to create a firewall rule that allows traffic on port 5432 ONLY from the Web servers to the Database servers. You want to ensure this rule automatically applies to any new Web or Database servers created in the future.
Which TWO actions should you take to configure this securely and efficiently? (Select TWO)
You have a VPC network with two sets of Compute Engine instances: Web servers and Database servers. You want to create a firewall rule that allows traffic on port 5432 ONLY from the Web servers to the Database servers. You want to ensure this rule automatically applies to any new Web or Database servers created in the future.
Which TWO actions should you take to configure this securely and efficiently? (Select TWO)
Answer options:
Assign a network tag (e.g., 'web') to the Web servers and a tag (e.g., 'db') to the Database servers.
Create an ingress firewall rule targeting the 'db' tag, with the source filter set to the 'web' tag.
Create an egress firewall rule targeting the 'web' tag, with the destination filter set to the 'db' tag.
Assign static internal IP addresses to all servers and use those IPs in the firewall rule.
Place the Web servers and Database servers in different VPC networks and use VPC peering.
How to approach this question
Full Answer
Common mistakes
Practice the full GCP Associate Cloud Engineer Practice Exam 3
50 questions · hints · full answers · grading