Your organization requires that all SMTP traffic to your cloud environment is blocked, except for traffic that originates from your corporate network. Your organization also requires that only…

Question

Options

• A
  1. Configure an ingress hierarchical firewall rule with priority 10000 specifying the 0.0.0.0/0
• B
  1. Configure an ingress hierarchical firewall rule with priority 10000 specifying the 0.0.0.0/0
• C
  1. Configure an ingress hierarchical firewall rule with priority 10000 specifying the source of your
• D
  1. Configure an ingress hierarchical firewall rule with priority 10000 specifying the 0.0.0.0/0

• A
  4% (1)
• B
  12% (3)
• C
  80% (20)
• D
  4% (1)

Explanation

The correct approach uses a two-layer hierarchical firewall strategy. First, an org-level or folder-level ingress hierarchical firewall rule at high priority (e.g., 10000) denies all SMTP traffic (port 25) from 0.0.0.0/0, blocking SMTP globally. Second, VPC-level firewall rules on only the specific allowed VPCs permit SMTP ingress from the corporate network source IP range. Option C correctly specifies the corporate network as the source for the allow rule, scoping access appropriately. The other options either use incorrect source ranges or apply rules at the wrong scope, failing to restrict access to only the designated VPCs.

No community discussion yet for this question.