Google Professional Cloud Network Engineer Question 367
Select 3Google Cloud PlatformYou are managing a Google Cloud infrastructure for a company that wants to monitor firewall rule activity in their environment. They have asked you to enable Firewall Rules Logging to capture logs for specific rules in a Virtual Private Cloud (VPC). Which steps must you take to correctly configure and enable Firewall Rules Logging?
- A
Enable logging for the specific firewall rule in the Google Cloud Console or using gcloud CLI.
- B
Configure Cloud Logging to accept and store logs from the firewall in the appropriate log bucket.
- C
Assign a service account with the 'Logging Admin' role to the firewall rule.
- D
Ensure that the VPC network has a subnetwork in the same region as the firewall rule.
- E
Verify that Cloud Logging is enabled in the project where the firewall rule resides.
Show answer and explanation
Correct answers: A, B, E
Explanation
To enable Firewall Rules Logging, you must first enable logging for the specific firewall rule in the Google Cloud Console or via the gcloud CLI. Cloud Logging must also be enabled for the project, and the logs must be configured to be accepted and stored in the appropriate log bucket. Assigning specific roles to service accounts or configuring subnetworks is not required for this task.
- A. Correct.
Correct. Enabling logging for a specific firewall rule is required to capture logs for that rule. This can be done via the Google Cloud Console or the gcloud CLI.
- B. Correct.
Correct. After enabling logging for the firewall rule, Cloud Logging must be configured to accept and store the logs. Without this, the logs cannot be viewed or analyzed.
- C. Incorrect.
Incorrect. Assigning a service account with the 'Logging Admin' role is not required to enable Firewall Rules Logging. The necessary permissions are handled at the project level.
- D. Incorrect.
Incorrect. While subnetworks are important for VPC configurations, they are not directly related to enabling or configuring Firewall Rules Logging.
- E. Correct.
Correct. Cloud Logging must be enabled in the same project where the firewall rule resides to ensure logs are captured and stored correctly.