Google Exam Associate Cloud Engineer Topic 10 Question 64 Discussion

Actual exam question for Google's Associate Cloud Engineer exam

Question #: 64
Topic #: 10

[All Associate Cloud Engineer Questions]

Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.

Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:

* Instances in tier #1 must communicate with tier #2.

* Instances in tier #2 must communicate with tier #3.

What should you do?

A1. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.1.0/24)* Protocols: allow all

B1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow TCP:80802. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow TCP: 8080

C1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow all

D1. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow TCP: 80802. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.1.0/24)* Protocols: allow TCP: 8080

Show Suggested Answer

Suggested Answer: D

gcloud deployment-manager deployments create creates deployments based on the configuration file. (Infrastructure as code). All the configuration related to the artifacts is in the configuration file. This command correctly creates a cluster based on the provided cluster.yaml configuration file.

Ref:https://cloud.google.com/sdk/gcloud/reference/deployment-manager/deployments/create

by Cecilia at Feb 05, 2023, 06:35 AM

Limited Time Offer

25%

Off

Get Premium Associate Cloud Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

2 months ago

Option D? Really? Egress rules? That's just silly. Clearly, Option B is the correct answer here.

upvoted 0 times

2 months ago

Option C seems a bit overkill by allowing all protocols. I'd go with Option B to keep things more specific.

upvoted 0 times

Jess

1 months ago

Yeah, Option B is definitely the better choice for this scenario.

upvoted 0 times

...

Izetta

2 months ago

I agree, Option B seems more targeted and specific.

upvoted 0 times

...

Leigha

2 months ago

Option B looks good, but I'm not sure if allowing all protocols is necessary. Maybe we can limit it to just TCP:8080 for both rules.

upvoted 0 times

...

3 months ago

I think the answer is B.

upvoted 0 times

...