Google Professional Cloud Network Engineer Question 355
Select 3Google Cloud PlatformYour organization has been using Google Cloud firewall rules to control traffic in a shared VPC environment. To simplify management and improve scalability, you are tasked with migrating to firewall policies. Which steps should you take to perform a successful migration while ensuring minimal downtime?
- A
Create a hierarchical firewall policy, attach it to the appropriate folder or organization node, and replicate the existing firewall rule configurations in the policy.
- B
Delete all existing firewall rules immediately after creating the hierarchical firewall policy to avoid conflicts.
- C
Test the new firewall policy by applying it to a non-critical project before attaching it to the shared VPC host project.
- D
Use hierarchical firewall policies to define rules that apply at the organization or folder level, and remove redundant rules from the project level.
- E
Manually disable all project-level firewall rules after attaching the hierarchical firewall policy.
Show answer and explanation
Correct answers: A, C, D
Explanation
Migrating from firewall rules to firewall policies in Google Cloud improves scalability and simplifies management by allowing centralized rule definitions at the organization or folder level. To ensure a smooth migration, hierarchical firewall policies should be carefully configured, tested, and applied to the appropriate scope. Testing in a non-critical project minimizes the risk of downtime, and redundant project-level rules can be removed after confirming the new policies are effective. Immediate deletion or disabling of existing rules is not recommended, as it could lead to traffic disruptions.
- A. Correct.
Correct. Creating a hierarchical firewall policy and attaching it to the folder or organization node ensures that rules are applied consistently across the appropriate scope. Replicating existing configurations ensures compatibility during migration.
- B. Incorrect.
Incorrect. Deleting all firewall rules immediately could cause traffic disruptions, especially if the hierarchical firewall policy is not yet fully configured and tested.
- C. Correct.
Correct. Testing the new firewall policy in a non-critical project ensures that the rules are functioning as expected before applying them to the shared VPC host project, reducing the risk of downtime.
- D. Correct.
Correct. Hierarchical firewall policies allow you to define rules at a higher level (organization or folder), which simplifies management and reduces redundancy compared to project-level rules.
- E. Incorrect.
Incorrect. Disabling all project-level firewall rules manually is unnecessary and could cause unintended disruptions. Instead, redundant rules can be safely removed after ensuring the hierarchical firewall policy is working as intended.