Google Professional Cloud Network Engineer Question 782
Select 3Google Cloud PlatformYour organization has recently implemented several new firewall rules in Google Cloud to enhance security. However, you notice that some rules are not being utilized as expected. To optimize the firewall configuration, you decide to use Firewall Insights. Which of the following actions can be performed using Firewall Insights to address this issue?
- A
Monitor the hit counts of firewall rules to determine which rules are actively being used.
- B
Identify shadowed rules that are never matched due to higher-priority rules.
- C
Automatically delete shadowed rules without requiring any approval.
- D
Optimize rule priority to ensure all rules are evaluated equally.
- E
View recommendations to clean up unused or redundant rules.
Show answer and explanation
Correct answers: A, B, E
Explanation
Firewall Insights is a tool in Google Cloud that helps identify inefficiencies in firewall configurations. It allows administrators to monitor rule hit counts, identify shadowed rules, and receive cleanup recommendations for unused or redundant rules. These features enable better optimization and management of firewall rules, but the tool does not perform actions such as automatic deletion or priority optimization without user intervention.
- A. Correct.
Correct: Firewall Insights provides the ability to monitor the hit counts of firewall rules, helping you identify which rules are actively being used or unused.
- B. Correct.
Correct: Firewall Insights can identify shadowed rules, which are rules that never get matched because higher-priority rules take precedence.
- C. Incorrect.
Incorrect: Firewall Insights does not automatically delete shadowed rules; it provides insights and recommendations, but the user must take action.
- D. Incorrect.
Incorrect: Firewall Insights does not optimize rule priority automatically. It focuses on providing insights regarding rule usage and shadowing.
- E. Correct.
Correct: Firewall Insights offers recommendations for cleaning up unused or redundant rules to help improve firewall efficiency.