FirstTry

Objective 3.3

ACE

Managing networking resources

Objective 3.3 sits in Ensuring the successful operation of a cloud solution, which carries 30% of the Associate Cloud Engineer exam. The questions below are original, written from the official objective title above, and each explanation cites the Google Cloud page it rests on.

Objective title verbatim from the official objectives. Google Cloud exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

3-3Ensuring the successful operation of a cloud solution

An engineer writes a single VPC firewall rule meant to cover traffic entering and leaving a VM. What does one rule allow?

Both directions in one ruleA single rule cannot span the two directions.
Direction inferred from portsPorts narrow a rule rather than orienting it.
Direction chosen per targetTargets select which instances a rule reaches.
One direction only per ruleCorrect · your answerCorrect. Two rules are needed for both.

Correct.

Concept

A packet filter that lets one entry answer several questions at once becomes impossible to audit, because nobody can say what any single line permits. Narrow entries are what make a rule set reviewable.

Why D

Each VPC firewall rule applies to incoming connections or to outgoing connections, never to both. Covering both needs two rules.

Source

#gcp#vpc#firewall-rules#ingress-egress

Now you: objective 3.3 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

3-3Ensuring the successful operation of a cloud solution

A team wants to allow an inbound TCP connection but block the packets sent back in reply. What do VPC firewall rules permit?

Sample question 2 of 3

3-3Ensuring the successful operation of a cloud solution

An administrator peers two VPC networks and expects the firewall rules of one to cover the other. What does Google Cloud state?

Sample question 3 of 3

3-3Ensuring the successful operation of a cloud solution

An engineer adds an IPv4 CIDR block and an IPv6 block to the same firewall rule. What does Google Cloud allow?

Full Associate Cloud Engineer question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Ensuring the successful operation of a cloud solution