You are working with a user to set up an application in a new VPC behind a firewall and it is no- ticed that the user is concerned about data egress. Therefore, to provide assistance you want to…

Question

Options

• ASet up a high-priority (1000) rule that blocks all egress and a low-priority (65534) rule that allows
• BSet up a low-priority (65534) rule that blocks all egress and a high-priority rule (1000) that allows
• CSet up a high-priority (1000) rule to allow the appropriate ports.
• DSet up a high-priority (1000) rule that pairs both ingress and egress ports.

• A
  6% (2)
• B
  82% (27)
• C
  9% (3)
• D
  3% (1)

Explanation

In GCP firewall rules, a lower priority number means higher precedence (priority 1000 is evaluated before 65534). To minimize egress exposure, the correct approach is: set a low-priority (65534) rule that blocks ALL egress by default, and then set a high-priority (1000) rule that explicitly allows only the specific required ports. This deny-by-default model ensures that only whitelisted ports are open. Option A reverses the logic - a high-priority block would override the allow rule, preventing all traffic. Option C only allows ports without blocking others by default, leaving unspecified ports open.

No community discussion yet for this question.