Google Professional Cloud Network Engineer Question 738
Select 3Google Cloud PlatformYou have deployed a Cloud NGFW (Next-Generation Firewall) in your Google Cloud environment to secure traffic for an e-commerce application. Users report that they are unable to access the application, and you suspect the issue lies with the NGFW rule configuration. You need to troubleshoot and resolve the issue while ensuring only legitimate traffic is allowed. What actions should you take?
- A
Review the NGFW logs to identify blocked requests and analyze the reasons for the blocks.
- B
Modify the NGFW rule to allow all incoming traffic to the application temporarily for testing.
- C
Check the priority order of the NGFW rules to ensure the correct rule is being applied to the traffic.
- D
Verify that the target IP addresses and ports in the NGFW rules match the application’s configuration.
- E
Disable all NGFW rules and manually inspect traffic to identify problematic requests.
Show answer and explanation
Correct answers: A, C, D
Explanation
When troubleshooting NGFW rules, it is essential to follow a structured approach. Start by reviewing logs to understand what is being blocked and why. Then, ensure that the rules are correctly prioritized, as NGFWs evaluate rules in order. Finally, verify that the rules match the intended traffic configuration, such as IP addresses and ports. Avoid disabling all rules or allowing all traffic, as these actions compromise the security of the application.
- A. Correct.
Reviewing NGFW logs can help identify which requests are being blocked and why, providing critical information for troubleshooting.
- B. Incorrect.
Allowing all incoming traffic temporarily is not recommended as it creates a significant security risk and goes against best practices.
- C. Correct.
The priority order of NGFW rules is crucial since rules are evaluated in order, and a misconfigured or higher-priority rule may block legitimate traffic.
- D. Correct.
Ensuring that the target IP addresses and ports match the application’s configuration is necessary to confirm that the rules are aligned with the intended traffic.
- E. Incorrect.
Disabling all NGFW rules is not a safe approach as it exposes the application to potential malicious traffic and can lead to security vulnerabilities.