Google Professional Cloud Network Engineer Question 781
Select 2Google Cloud PlatformYour organization is using Google Cloud Firewall Insights to monitor and optimize firewall rules. Upon reviewing the Firewall Insights report, you notice that several rules have a hit count of zero, and some rules are marked as shadowed. What actions can you take to address and resolve these issues?
- A
Delete firewall rules with a hit count of zero, as they are not being used.
- B
Reorder firewall rules to ensure shadowed rules are evaluated before the rules that are shadowing them.
- C
Investigate the shadowed rules to determine if they are redundant or need modifications.
- D
Increase the priority of rules with a hit count of zero to ensure they are evaluated more frequently.
Show answer and explanation
Correct answers: B, C
Explanation
Firewall Insights helps identify issues such as shadowed rules and rules with a zero hit count. Shadowed rules occur when higher-priority rules prevent certain rules from being evaluated. To resolve this, you must investigate the shadowed rules and adjust their order or configuration if necessary. Rules with a hit count of zero should also be reviewed to understand their purpose before deciding to modify or delete them.
- A. Incorrect.
Deleting rules with a hit count of zero without proper investigation can lead to unintended disruptions. These rules might still be necessary under specific conditions that have not yet occurred.
- B. Correct.
Reordering rules can help resolve shadowing issues by ensuring that rules intended to take precedence are evaluated first. Shadowed rules are typically not effective as they are overridden by higher-priority rules.
- C. Correct.
Investigating shadowed rules is a critical step to determine if they are redundant, incorrectly configured, or need to be removed or modified.
- D. Incorrect.
Increasing the priority of rules with a hit count of zero is not a recommended action, as it may lead to unintended consequences or misconfigurations. Instead, investigate the necessity of these rules.