Google
PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #136
In your project my-project, you have two subnets in a Virtual Private Cloud (VPC): subnet-a with IP range 10.128.0.0/20 and subnet-b with IP range 172.16.0.0/24. You need to deploy database servers in
Sign in or unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER to reveal the answer and full explanation for question #136. The question stem and answer options stay visible for context.
Submitted by andres_qro· Apr 18, 2026Implementing network security
Question
In your project my-project, you have two subnets in a Virtual Private Cloud (VPC): subnet-a with IP range 10.128.0.0/20 and subnet-b with IP range 172.16.0.0/24. You need to deploy database servers in subnet-A. You will also deploy the application servers and web servers in subnet-b. You want to configure firewall rules that only allow database traffic from the application servers to the database servers. What should you do?
Options
- ACreate network tag app-server and service account [email protected].
- BCreate service accounts [email protected] and sa-db@my-
- CCreate service accounts [email protected] and sa-db@my-
- DCreate network tags app-server and db-server.
Unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-NETWORK-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Firewall Rules#Network Security#Service Accounts#VPC Networking