ASSOCIATE-CLOUD-ENGINEER · Question #37
You have set a firewall rule that will permit inbound connections to a VM instance named whizserver-2. You want to apply this rule only if there is not another rule that would deny that traffic. What
The correct answer is C. 65535. To ensure a permit rule applies only if no other deny rule takes precedence, it should be given the lowest possible priority value.
Question
Options
- A1000
- B1
- C65535
- D0
How the community answered
(27 responses)- B4% (1)
- C93% (25)
- D4% (1)
Why each option
To ensure a permit rule applies only if no other deny rule takes precedence, it should be given the lowest possible priority value.
A priority of 1000 is a relatively high priority, meaning it would override many other rules, which is not the goal if the rule should only apply if no deny rule exists.
A priority of 1 is a very high priority, second only to 0, meaning it would almost always take precedence, which contradicts the requirement.
In Google Cloud firewall rules, priority is an integer from 0 to 65535, where 0 is the highest priority and 65535 is the lowest. By giving the permit rule a priority of 65535, it will only be evaluated and applied if no other higher-priority (lower number) firewall rules, including implicit or explicit deny rules, match the traffic.
A priority of 0 is the highest possible priority, ensuring the rule takes precedence over all other rules, which is contrary to the requirement of applying only if no deny rule exists.
Concept tested: Google Cloud Firewall Rule Priority
Source: https://cloud.google.com/vpc/docs/firewalls#priority
Topics
Community Discussion
No community discussion yet for this question.