Google Professional Cloud Network Engineer Question 783
Select 3Google Cloud PlatformYour organization has implemented multiple firewall rules in Google Cloud to secure various workloads. However, some firewall rules are no longer being used, and others are shadowed, causing inefficiencies. As a Professional Cloud Network Engineer, you are tasked with optimizing the firewall rules. How can you use Firewall Insights to monitor rule hit count and identify shadowed rules effectively?
- A
Enable Firewall Insights in the Google Cloud Console and review the hit count metrics to determine which rules are not being used.
- B
Use the Firewall Insights shadowed rules report to identify rules that are never evaluated because higher-priority rules take precedence.
- C
Delete any firewall rules that show zero hits in the Firewall Insights hit count metrics without further review.
- D
Export the Firewall Insights data to BigQuery for analysis and automate the process of identifying shadowed and unused rules.
- E
Configure Firewall Insights to automatically delete shadowed rules after 30 days of inactivity.
Show answer and explanation
Correct answers: A, B, D
Explanation
Firewall Insights is a powerful tool for managing and optimizing firewall rules in Google Cloud. By enabling Firewall Insights, you can monitor hit count metrics and identify unused rules. The shadowed rules report provides insights into rules that are never evaluated because higher-priority rules take precedence. Exporting data to BigQuery enables further analysis and automation. However, changes to firewall rules, including deletion, should always be reviewed to avoid unintended disruptions.
- A. Correct.
Correct: Enabling Firewall Insights and reviewing hit count metrics is a best practice to monitor rule usage and identify unused rules.
- B. Correct.
Correct: The shadowed rules report in Firewall Insights helps determine rules that are never evaluated due to higher-priority rules, making it essential for optimization.
- C. Incorrect.
Incorrect: Deleting rules with zero hits without further review is risky, as these rules might be critical for certain scenarios that do not generate hits under normal conditions.
- D. Correct.
Correct: Exporting Firewall Insights data to BigQuery allows for advanced analysis and automation, making it easier to manage complex firewall rule sets.
- E. Incorrect.
Incorrect: Firewall Insights does not have a feature to automatically delete shadowed rules. All changes to firewall rules must be manually reviewed and implemented.