nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #127

Your company has defined a resource hierarchy that includes a parent folder with subfolders for each department. Each department defines their respective project and VPC in the assigned folder and…

The correct answer is D. Create two hierarchical firewall policies per department's folder with two rules in each: a high-. Hierarchical firewall policies let you create and enforce a consistent firewall policy across your organization. You can assign hierarchical firewall policies to the organization as a whole or to individual folders. These policies contain rules that can explicitly deny or allow…

Submitted by yuriko_h· Apr 18, 2026Designing, planning, and prototyping a Google Cloud network

Question

Your company has defined a resource hierarchy that includes a parent folder with subfolders for each department. Each department defines their respective project and VPC in the assigned folder and has the appropriate permissions to create Google Cloud firewall rules. The VPCs should not allow traffic to flow between them. You need to block all traffic from any source, including other VPCs, and delegate only the intra-VPC firewall rules to the respective departments. What should you do?

Options

  • ACreate a VPC firewall rule in each VPC to block traffic from any source, with priority 0.
  • BCreate a VPC firewall rule in each VPC to block traffic from any source, with priority 1000.
  • CCreate two hierarchical firewall policies per department's folder with two rules in each: a high-
  • DCreate two hierarchical firewall policies per department's folder with two rules in each: a high-

How the community answered

(19 responses)
  • A
    5% (1)
  • B
    11% (2)
  • C
    26% (5)
  • D
    58% (11)

Explanation

Hierarchical firewall policies let you create and enforce a consistent firewall policy across your organization. You can assign hierarchical firewall policies to the organization as a whole or to individual folders. These policies contain rules that can explicitly deny or allow connections, as do Virtual Private Cloud (VPC) firewall rules. In addition, hierarchical firewall policy rules can delegate evaluation to lower-level policies or VPC network firewall rules with a goto_next action.

Topics

#Hierarchical Firewall Policies#Network Security#Resource Hierarchy#Firewall Rule Delegation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice