6.2 Configuring and Managing NGFW Policies and VPC Firewall Rules. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   Which of the following can be used as a source or destination in a VPC firewall rule to implement micro-segmentation?

   • AProject numbers
   • BNetwork tags
   • CZone names
   • DInstance names
   Reveal Solution Discussion Select an answer first
2. 17foundation · medium

   You are configuring a VPC firewall rule in Google Cloud. Which combination of criteria must be specified to define the rule's traffic matching behavior?

   • ADirection, action, and logging flag only
   • BDirection, source, destination, protocol, and priority
   • CPriority, protocol, and action only
   • DSource, destination, and port only
   Reveal Solution Discussion Select an answer first
3. 18foundation · easy

   What is a key difference between Cloud NGFW Essentials and Cloud NGFW Standard?

   • ACloud NGFW Standard includes advanced threat protection features, such as intrusion detection and prevention, while Essentials provides basic firewall capabilities.
   • BCloud NGFW Essentials supports layer 7 inspection, while Standard does not.
   • CCloud NGFW Standard supports hierarchical policies, while Essentials does not.
   • DCloud NGFW Essentials is only available for global VPCs, while Standard is available for regional VPCs.
   Reveal Solution Discussion Select an answer first