nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #37

You have set a firewall rule that will permit inbound connections to a VM instance named whizserver-2. You want to apply this rule only if there is not another rule that would deny that traffic. What

The correct answer is C. 65535. To ensure a permit rule applies only if no other deny rule takes precedence, it should be given the lowest possible priority value.

Submitted by ahmad_uae· Mar 30, 2026Configuring access and security

Question

You have set a firewall rule that will permit inbound connections to a VM instance named whizserver-2. You want to apply this rule only if there is not another rule that would deny that traffic. What priority would you give to this rule?

Options

  • A1000
  • B1
  • C65535
  • D0

How the community answered

(27 responses)
  • B
    4% (1)
  • C
    93% (25)
  • D
    4% (1)

Why each option

To ensure a permit rule applies only if no other deny rule takes precedence, it should be given the lowest possible priority value.

A1000

A priority of 1000 is a relatively high priority, meaning it would override many other rules, which is not the goal if the rule should only apply if no deny rule exists.

B1

A priority of 1 is a very high priority, second only to 0, meaning it would almost always take precedence, which contradicts the requirement.

C65535Correct

In Google Cloud firewall rules, priority is an integer from 0 to 65535, where 0 is the highest priority and 65535 is the lowest. By giving the permit rule a priority of 65535, it will only be evaluated and applied if no other higher-priority (lower number) firewall rules, including implicit or explicit deny rules, match the traffic.

D0

A priority of 0 is the highest possible priority, ensuring the rule takes precedence over all other rules, which is contrary to the requirement of applying only if no deny rule exists.

Concept tested: Google Cloud Firewall Rule Priority

Source: https://cloud.google.com/vpc/docs/firewalls#priority

Topics

#firewall rules#priority#VPC#rule precedence

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice