You created a new VPC for your development team. You want to allow access to the resources in this VPC via SSH only. How should you configure your firewall rules?

Question

Options

• ACreate two firewall rules: one to block all traffic with priority 0, and another to allow port 22 with
• BCreate two firewall rules: one to block all traffic with priority 65536, and another to allow port 3389
• CCreate a single firewall rule to allow port 22 with priority 1000.
• DCreate a single firewall rule to allow port 3389 with priority 1000.

• A
  7% (3)
• B
  2% (1)
• C
  80% (36)
• D
  11% (5)

Explanation

GCP automatically enforces an implicit 'deny all ingress' rule at priority 65535 on every VPC. This means all inbound traffic is blocked by default unless explicitly allowed. Therefore, you only need a single firewall rule to allow TCP port 22 (SSH) at a priority lower than 65535 (e.g., 1000). The implicit deny handles all other traffic - no explicit block rule is needed. Option A is wrong because priority 0 is the highest priority in GCP (lower number = higher priority), so a block-all rule at priority 0 would override everything and block SSH too. Option B uses port 3389 (RDP, not SSH). Option D also uses RDP port 3389.

No community discussion yet for this question.