PROFESSIONAL-CLOUD-ARCHITECT · Question #191
Case Study: 9 - Helicopter Racing League Company overview Helicopter Racing League (HRL) is a global sports league for competitive helicopter racing. Each year HRL holds the world championship and…
The correct answer is D. gcloud compute security-policies rules update 1000 \ --security-policy hlr-policy \ --expression "evaluatePreconfiguredExpr('sourceiplist-fastly')" \ --action "allow". Option D is correct because it uses gcloud compute security-policies rules update with the --expression flag to evaluate a preconfigured named IP list (sourceiplist-fastly), which is the proper way to allow traffic from Fastly CDN IP ranges using Cloud Armor security policies…
Question
Exhibits
Options
- Agcloud compute security-policies rules update 1000
--security-policy hlr-policy
--src-ip-ranges *
--action "allow" - Bgcloud compute firewall rules update sourceiplist-fastly
--priority 1000
--allow tcp:443 - Cgcloud compute firewall rules update hlr-policy
--priority 1000
--target-tags=sourceiplist-fastly
--allow tcp:443 - Dgcloud compute security-policies rules update 1000
--security-policy hlr-policy
--expression "evaluatePreconfiguredExpr('sourceiplist-fastly')"
--action "allow"
How the community answered
(60 responses)- A10% (6)
- B17% (10)
- C3% (2)
- D70% (42)
Explanation
Option D is correct because it uses gcloud compute security-policies rules update with the --expression flag to evaluate a preconfigured named IP list (sourceiplist-fastly), which is the proper way to allow traffic from Fastly CDN IP ranges using Cloud Armor security policies. Cloud Armor supports preconfigured expression sets for known CDN/partner IP ranges, and evaluatePreconfiguredExpr('sourceiplist-fastly') is the exact syntax to reference Fastly's IP list. This approach allows HRL to permit Fastly CDN traffic while maintaining their Cloud Armor security policy controls.
Topics
Community Discussion
No community discussion yet for this question.


