Google Professional Cloud Network Engineer Question 358
Select 3Google Cloud PlatformYour organization has been using Google Cloud firewall rules for network traffic control. To streamline management and enforce hierarchical policies, you are tasked with migrating to firewall policies. During the migration, which of the following steps must you take to ensure a successful transition?
- A
Create a hierarchical firewall policy and attach it to the appropriate organization or folder nodes.
- B
Manually disable all existing VPC firewall rules to prevent conflicts with the new hierarchical firewall policy.
- C
Migrate existing firewall rules into the new hierarchical firewall policy by replicating their configurations.
- D
Ensure that the hierarchical firewall policy is evaluated before VPC firewall rules for all new traffic.
- E
Test the hierarchical firewall policy in a development environment before applying it to production.
Show answer and explanation
Correct answers: A, C, E
Explanation
Migrating to hierarchical firewall policies involves creating and attaching the policies to the appropriate resource nodes, replicating the configurations of existing firewall rules, and testing the setup in a non-production environment. It is not necessary to disable existing VPC firewall rules, as both rules and policies can coexist. Additionally, the evaluation order of hierarchical firewall policies and VPC firewall rules is predetermined by Google Cloud.
- A. Correct.
Creating a hierarchical firewall policy and attaching it to the correct organization or folder nodes is a required step to implement the policy. Without this, the policy will not be applied correctly.
- B. Incorrect.
Disabling all VPC firewall rules is not required as hierarchical firewall policies and VPC firewall rules can coexist. However, it is important to understand the evaluation order between them.
- C. Correct.
Migrating existing firewall rules into the new hierarchical firewall policy by replicating their configurations is necessary to ensure that the same traffic control behavior is applied under the new policy framework.
- D. Incorrect.
Hierarchical firewall policies are always evaluated before VPC firewall rules by design. There is no need to explicitly ensure this during migration.
- E. Correct.
Testing the hierarchical firewall policy in a development environment is a best practice to avoid disruptions in production caused by misconfigurations or unintended behavior.