Google
PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #156
Your organization is implementing a new security policy to control how firewall rules are applied to control flows between virtual machines (VMs). Using Google-recommended practices, you need to set…
The correct answer is A. Firewall rule direction: ingress. If you need strict control over how firewall rules are applied to VMs, use target service accounts and source service accounts instead of target tags and source tags. https://cloud.google.com/vpc/docs/firewalls#service-accounts-vs-tags
Submitted by kavita_s· Apr 18, 2026Implementing network security
Question
Your organization is implementing a new security policy to control how firewall rules are applied to control flows between virtual machines (VMs). Using Google-recommended practices, you need to set up a firewall rule to enforce strict control of traffic between VM A and VM B. You must ensure that communications flow only from VM A to VM B within the VPC, and no other communication paths are allowed. No other firewall rules exist in the VPC. Which firewall rule should you configure to allow only this communication path?
Options
- AFirewall rule direction: ingress
- BFirewall rule direction: ingress
- CFirewall rule direction: ingress
- DFirewall rule direction: ingress
How the community answered
(24 responses)- A79% (19)
- B4% (1)
- C13% (3)
- D4% (1)
Explanation
If you need strict control over how firewall rules are applied to VMs, use target service accounts and source service accounts instead of target tags and source tags. https://cloud.google.com/vpc/docs/firewalls#service-accounts-vs-tags
Topics
#Firewall rules#VPC Network#Network security#Traffic control
Community Discussion
No community discussion yet for this question.