Google Cloud Professional Cloud Architect PCA — Topic 1 Question 91

Question

All Compute Engine instances in your VPC should be able to connect to an Active Directory server on specific ports. Any other traffic emerging from your instances is not allowed. You want to enforce this using VPC firewall rules. How should you configure the firewall rules?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create an egress rule with priority 1000 to deny all traffic for all instances. Create another egress rule with priority 100 to allow the Active Directory traffic for all instances.

Google Cloud Professional Cloud Architect PCA — Question 91