Google Professional Cloud Network Engineer Question 98
Single answerGoogle Cloud PlatformYour company has a multi-project environment within Google Cloud and needs to enforce consistent firewall rules across all projects while allowing individual project teams to define their own additional firewall rules specific to their applications. Which approach would you recommend to meet these requirements?
- A
Use only VPC firewall rules in each project to manage both global and project-specific rules.
- B
Implement hierarchical firewall rules at the organization or folder level and allow project teams to use VPC firewall rules for project-specific needs.
- C
Deploy Cloud Next Generation Firewall to enforce global rules and replace VPC firewall rules entirely.
- D
Use solely hierarchical firewall rules to manage both global and project-specific firewall requirements.
Show answer and explanation
Correct answer: B
Explanation
To enforce consistent firewall rules across all projects while allowing project-specific rules, hierarchical firewall rules should be implemented at the organization or folder level. This ensures consistency across the environment and provides flexibility for individual projects to define additional rules using VPC firewall rules. Other approaches either lack the capability for global enforcement or do not allow for project-specific customization.
- A. Incorrect.
VPC firewall rules are project-specific and cannot enforce consistent firewall rules across multiple projects. This approach does not meet the requirement for global rule enforcement.
- B. Correct.
Hierarchical firewall rules are designed to enforce global rules at the organization or folder level, while still allowing individual projects to implement their own VPC firewall rules. This approach meets both the global and project-specific requirements.
- C. Incorrect.
Cloud Next Generation Firewall offers advanced security features but is not designed to replace hierarchical or VPC firewall rules. It is better suited for specific security use cases rather than enforcing global and project-specific rules.
- D. Incorrect.
Hierarchical firewall rules alone cannot fulfill the need for project-specific rules because they apply to all projects under the hierarchy. This approach would not allow individual projects to define their own rules.