Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 163

Question

You need to audit the network segmentation for your Google Cloud footprint. You currently operate Production and Non-Production infrastructure-as-a-service (IaaS) environments. All your VM instances are deployed without any service account customization. After observing the traffic in your custom network, you notice that all instances can communicate freely `" despite tag-based VPC firewall rules in place to segment traffic properly `" with a priority of 1000. What are the most likely reasons for this behavior?

Accepted Answer

Correct answer: A, D. The correct answer is A, D. Option A: All VM instances are missing the respective network tags. Option D: A VPC firewall rule is allowing traffic between source/targets based on the same service account with priority 999. E. A VPC firewall rule is allowing traffic between source/targets based on the same service account... A VPC provides a global, software-defined private network for your Google Cloud resources. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Security Engineer PCSE — Question 163