Topic 1 Question 10
You created a new VPC network named Dev with a single subnet. You added a firewall rule for the network Dev to allow HTTP traffic only and enabled logging. When you try to log in to an instance in the subnet via Remote Desktop Protocol, the login fails. You look for the Firewall rules logs in Stackdriver Logging, but you do not see any entries for blocked traffic. You want to see the logs for blocked traffic. What should you do?
Check the VPC flow logs for the instance.
Try connecting to the instance via SSH, and check the logs.
Create a new firewall rule to allow traffic from port 22, and enable logs.
Create a new firewall rule with priority 65500 to deny all traffic, and enable logs.
ユーザの投票
コメント(17)
I think correct answer should be D. https://cloud.google.com/blog/products/identity-security/google-cloud-firewall-rules-logging-how-and-why-you-should-use-it
"Since we have implicit ingress and the denial rule is not being logged, we create a “deny all” rule with priority 65534 to capture anything that gets denied"
👍 23elguije2020/06/15Answer is D
👍 3kumarp62022/01/04Ans is D. You cannot enable Firewall Rules Logging for the implied deny ingress and implied allow egress rules.
👍 2looseboy2021/03/10
シャッフルモード