Google Professional Cloud Network Engineer Question 356
Select 3Google Cloud PlatformYour organization uses Google Cloud and currently manages network security with a large number of VPC firewall rules. To simplify and centralize management, you are tasked with migrating to hierarchical firewall policies. Which of the following steps must you take as part of this migration process?
- A
Create a hierarchical firewall policy at the organization or folder level.
- B
Delete all existing VPC firewall rules before applying hierarchical policies.
- C
Evaluate and prioritize rules to ensure they align with the hierarchical firewall policy structure.
- D
Apply the hierarchical firewall policy at the required organization, folder, or project level.
- E
Migrate all VPC firewall rules to the default-deny rule in hierarchical policies.
Show answer and explanation
Correct answers: A, C, D
Explanation
Migrating from VPC firewall rules to hierarchical firewall policies requires careful planning and execution. You must create a hierarchical policy at an appropriate level (organization or folder), evaluate and prioritize existing rules to align with the new structure, and apply the policy to the desired scope. This ensures a smooth transition while centralizing and simplifying network security management.
- A. Correct.
Correct. Hierarchical firewall policies must be created at the organization or folder level to ensure they can apply across multiple projects and VPCs.
- B. Incorrect.
Incorrect. It is not necessary to delete all existing VPC firewall rules before applying hierarchical policies. Both can coexist during the transition period.
- C. Correct.
Correct. Evaluating and prioritizing firewall rules is critical to ensure that the rules are effectively consolidated and aligned with the hierarchical policy structure.
- D. Correct.
Correct. Once the hierarchical firewall policy is created, it must be applied at the appropriate scope (organization, folder, or project) to take effect.
- E. Incorrect.
Incorrect. There is no need to migrate all VPC firewall rules into a single default-deny rule. Hierarchical firewall policies allow you to define specific rules as required.