A VPC firewall rule is not allowing traffic as expected. Which of the following is a common misconfiguration that could cause this?

The rule is defined for egress traffic, but the traffic is ingress.

The rule has a higher priority number than another rule that denies the traffic.

The rule uses a service account as a source, which is not supported in VPC firewall rules.

The rule is applied to the wrong VPC network.

Which Cloud NGFW tier provides layer 7 inspection capabilities?

All tiers support layer 7 inspection.

When migrating from VPC firewall rules to Cloud NGFW policies, what is a key step to preserve security intent?

Only migrate rules that are used for ingress traffic, and keep egress rules as VPC firewall rules.

Use a script to automatically convert VPC firewall rules to Cloud NGFW policies without manual review.

Delete all VPC firewall rules before creating Cloud NGFW policies.

Create Cloud NGFW policies that mirror the existing VPC firewall rules, then gradually remove the VPC firewall rules after verifying the policies are effective.

What is the primary purpose of enabling layer 7 inspection with Cloud NGFW Enterprise?

To encrypt traffic between VMs.

To provide DDoS protection at the network layer.

To inspect and block application-layer threats, such as SQL injection or cross-site scripting.

To filter traffic based on IP addresses and ports.

Which Cloud NGFW tier is required to enable layer 7 inspection?

All tiers support layer 7 inspection.

Google CloudProfessional Cloud Network Engineer

Domain 6Objective 2

6.2 Configuring and Managing NGFW Policies and VPC Firewall Rules. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 1)

Part of the Section 6: Configuring, implementing and managing a cloud network security solution (~13% of the exam) domain, which accounts for ~13% of the PROFESSIONAL-CLOUD-NETWORK-ENGINEER exam.

18questions here

4free pages

11concepts

~13%of the exam

Questions 1–5

1foundation · easy
A VPC firewall rule is not allowing traffic as expected. Which of the following is a common misconfiguration that could cause this?
Select an answer first
2foundation · easy
Which Cloud NGFW tier provides layer 7 inspection capabilities?
Select an answer first
3foundation · easy
When migrating from VPC firewall rules to Cloud NGFW policies, what is a key step to preserve security intent?
Select an answer first
4foundation · easy
What is the primary purpose of enabling layer 7 inspection with Cloud NGFW Enterprise?
Select an answer first
5foundation · easy
Which Cloud NGFW tier is required to enable layer 7 inspection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-NETWORK-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-NETWORK-ENGINEER” is a trademark of its owner, used for identification only.