6.2 Configuring and Managing NGFW Policies and VPC Firewall Rules. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A network engineer is designing a firewall strategy for a large organization with multiple projects and a centralized security team. The team needs to enforce baseline security rules across all projects while allowing individual project teams to add their own rules. Which approach best satisfies this requirement?

   • AUse hierarchical firewall rules at the organization level for baseline rules, and allow project-level VPC firewall rules for project-specific needs.
   • BUse VPC firewall rules at the folder level to enforce baseline rules across all projects in the folder.
   • CUse only VPC firewall rules at the project level, and rely on each project team to implement the baseline rules.
   • DUse Cloud NGFW policies only, and attach them to every VPC in the organization.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a potential risk of migrating VPC firewall rules to Cloud NGFW policies without proper planning?

   • AVPC firewall rules are automatically migrated to Cloud NGFW policies, so there is no risk.
   • BThe migration may introduce a temporary gap in security if rules are not properly replicated.
   • CCloud NGFW policies cannot be used for egress traffic, so egress rules will be lost.
   • DCloud NGFW policies are less secure than VPC firewall rules.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Where are VPC firewall rules logs sent by default?

   • ATo BigQuery
   • BTo Cloud Monitoring
   • CTo Cloud Storage
   • DTo Cloud Logging
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary benefit of using micro-segmentation in a cloud network?

   • AIt isolates workloads and enforces least-privilege access, limiting the blast radius of a security breach.
   • BIt reduces the number of firewall rules needed.
   • CIt eliminates the need for network monitoring.
   • DIt automatically encrypts all traffic between workloads.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following correctly describes the precedence between global and hierarchical Cloud NGFW policies?

   • AThe precedence is determined by the priority of the rules within each policy.
   • BGlobal policies always take precedence over hierarchical policies.
   • CGlobal and hierarchical policies cannot be used together.
   • DHierarchical policies always take precedence over global policies.
   Reveal Solution Discussion Select an answer first