Google Professional Cloud Network Engineer Question 780
Select 3Google Cloud PlatformYou are managing firewall rules for a VPC in your Google Cloud environment. While reviewing Firewall Insights, you notice that some of your firewall rules have a hit count of zero and others are flagged as shadowed. What actions should you take to optimize your firewall rule configuration?
- A
Review and remove rules with a hit count of zero if they are no longer needed.
- B
Modify the shadowed rules to ensure they take precedence over shadowing rules.
- C
Leave the shadowed rules as-is since they do not impact network performance.
- D
Merge redundant firewall rules to simplify the rule set.
- E
Use Firewall Insights to prioritize rules based on hit counts and shadowing status.
Show answer and explanation
Correct answers: A, D, E
Explanation
To optimize your firewall rule configuration, it's important to address rules with a hit count of zero and shadowed rules. Removing unused rules and merging redundant ones simplifies the configuration and reduces management complexity. Additionally, leveraging Firewall Insights to analyze rule hit counts and shadowing status helps you prioritize necessary adjustments while maintaining security and functionality.
- A. Correct.
Firewall rules with a hit count of zero may no longer be in use and can be removed to simplify the configuration, but careful review is required to ensure they are not needed for future or edge cases.
- B. Incorrect.
Modifying shadowed rules to take precedence over shadowing rules is not recommended, as this could disrupt the intended behavior of the firewall configuration.
- C. Incorrect.
Leaving shadowed rules as-is is not a best practice because they add unnecessary complexity and can lead to confusion during troubleshooting or audits.
- D. Correct.
Merging redundant firewall rules can help simplify the firewall configuration and reduce management overhead, improving overall clarity and maintainability.
- E. Correct.
Using Firewall Insights to prioritize rules based on hit counts and shadowing status is an effective way to identify which rules require attention and optimization.