nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #238

You have recently taken over responsibility for your organization's Google Cloud network security configurations. You want to review your Cloud Next Generation Firewall (Cloud NGFW) configurations…

The correct answer is B. Use Firewall Insights, and enable insights for Overly permissive rules. Firewall Insights is a feature in Google Cloud that helps identify security misconfigurations, including overly permissive firewall rules. By enabling the "Overly permissive rules" insights, you can efficiently detect any ingress rules that allow traffic from 0.0.0.0/0 (the…

Submitted by obi.ng· Apr 18, 2026Implementing network security

Question

You have recently taken over responsibility for your organization's Google Cloud network security configurations. You want to review your Cloud Next Generation Firewall (Cloud NGFW) configurations to ensure that there are no rules allowing ingress traffic to your VMs and services from the internet. You want to avoid manual work. What should you do?

Options

  • AExport all your Cloud NGFW rules into a CSV file and search for 0.0.0.0/0.
  • BUse Firewall Insights, and enable insights for Overly permissive rules.
  • CRun Connectivity Tests from multiple external sources to confirm that traffic is not allowed to
  • DReview Network Analyzer insights on the VPC network category.

How the community answered

(63 responses)
  • A
    13% (8)
  • B
    75% (47)
  • C
    8% (5)
  • D
    5% (3)

Explanation

Firewall Insights is a feature in Google Cloud that helps identify security misconfigurations, including overly permissive firewall rules. By enabling the "Overly permissive rules" insights, you can efficiently detect any ingress rules that allow traffic from 0.0.0.0/0 (the entire internet), ensuring that no unnecessary or risky access is permitted.

Topics

#Cloud NGFW#Firewall Insights#Network security#Configuration review

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice