Intrigued by the art of cloud architecture? Discover how to design, develop, and manage robust, secure, scalable, and dynamic solutions on Google Cloud as you prepare for the Professional Cloud Architect exam!
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
An enterprise is designing network security controls in Google Cloud to prevent data exfiltration from resources within a Virtual Private Cloud (VPC) network. Workloads in the VPC must communicate with Google APIs exclusively through the restricted virtual IP (VIP) range 199.36.153.4/30 on TCP port 443.
The security architect must enforce strict egress controls to ensure that all general outbound internet traffic is blocked while outbound access to Google services via the restricted VIP is permitted without disrupting internal traffic flows or connector communication.
How should the VPC egress firewall rules and priority levels be configured?
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.
StudyCerts
StudyCerts