Examtopics

Professional Cloud Architect

  • Topic 3 Question 2

    For this question, refer to the Helicopter Racing League (HRL) case study. Recently HRL started a new regional racing league in Cape Town, South Africa. In an effort to give customers in Cape Town a better user experience, HRL has partnered with the Content Delivery Network provider, Fastly. HRL needs to allow traffic coming from all of the Fastly IP address ranges into their Virtual Private Cloud network (VPC network). You are a member of the HRL security team and you need to configure the update that will allow only the Fastly IP address ranges through the External HTTP(S) load balancer. Which command should you use?

    • gcloud compute security-policies rules update 1000 \ --security-policy from-fastly \ --src-ip-ranges * \ --action ג€allowג€

    • gcloud compute firewall rules update sourceiplist-fastly \ --priority 100 \ --allow tcp:443

    • gcloud compute firewall rules update hir-policy \ --priority 100 \ --target-tags=sourceiplist-fastly \ --allow tcp:443

    • gcloud compute security-policies rules update 1000 \ --security-policy hir-policy \ --expression ג€evaluatePreconfiguredExpr('sourceiplist-fastly')ג€ \ --action ג€allowג€

    シャッフルモード