exam questions

Exam Associate Cloud Engineer All Questions

View all questions & answers for the Associate Cloud Engineer exam

Exam Associate Cloud Engineer topic 1 question 87 discussion

Actual exam question from Google's Associate Cloud Engineer
Question #: 87
Topic #: 1
[All Associate Cloud Engineer Questions]

You deployed an LDAP server on Compute Engine that is reachable via TLS through port 636 using UDP. You want to make sure it is reachable by clients over that port. What should you do?

  • A. Add the network tag allow-udp-636 to the VM instance running the LDAP server.
  • B. Create a route called allow-udp-636 and set the next hop to be the VM instance running the LDAP server.
  • C. Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port 636 for that network tag.
  • D. Add a network tag of your choice to the instance running the LDAP server. Create a firewall rule to allow egress on UDP port 636 for that network tag.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
kishoredeena
Highly Voted 4 years, 2 months ago
Option C is the right one
upvoted 33 times
...
cloudenthu01
Highly Voted 4 years, 2 months ago
C is correct You tag the instances ,then create ingress firewall rules to allow udp on desired port for target-tags name applied to instances
upvoted 26 times
...
kelliot
Most Recent 9 months, 1 week ago
Option C, agree
upvoted 2 times
...
BAofBK
10 months ago
The correct answer is C
upvoted 1 times
...
Captain1212
1 year ago
Selected Answer: C
C is correct bcoz of ingress
upvoted 1 times
...
Partha117
1 year, 5 months ago
Selected Answer: C
Firewall rule for ingress is correct
upvoted 1 times
...
Buruguduystunstugudunstuy
1 year, 6 months ago
Selected Answer: C
Answer C is correct: Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port 636 for that network tag. To make sure that the LDAP server is reachable by clients over port 636 using UDP, you need to allow ingress traffic on that port. You can achieve this by adding a network tag to the instance running the LDAP server and then creating a firewall rule that allows ingress traffic on UDP port 636 for that network tag.
upvoted 4 times
...
ratnesh_uk01
1 year, 8 months ago
can anyone please suggest why D is not correct? thanks
upvoted 1 times
Buruguduystunstugudunstuy
1 year, 6 months ago
Answer D is incorrect because adding a network tag of your choice to the instance running the LDAP server and creating a firewall rule to allow egress traffic on UDP port 636 for that network tag would not allow incoming traffic on that port. You need to create a firewall rule that allows ingress traffic on that port.
upvoted 5 times
...
rs7745
5 months ago
egress!
upvoted 3 times
...
...
leogor
1 year, 9 months ago
Selected Answer: C
allow ingress
upvoted 1 times
...
AzureDP900
2 years, 2 months ago
C is right.
upvoted 1 times
...
haroldbenites
2 years, 3 months ago
Go for C
upvoted 1 times
...
Fayi
2 years, 7 months ago
You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do? A. Deploy me application on App Engine For each update, create a new version of the same service Configure traffic splitting to send a small percentage of traffic to the new version B. Deploy the application on App Engine For each update, create a new service Configure traffic splitting to send a small percentage of traffic to the new service. C. Deploy the application on Kubernetes Engine For a new release, update the deployment to use the new version D. Deploy the application on Kubernetes Engine For a now release, create a new deployment for the new version Update the service e to use the now deployment.
upvoted 4 times
akhun
1 year, 7 months ago
A is correct
upvoted 1 times
...
akshaychavan7
2 years, 3 months ago
A without any doubt.
upvoted 1 times
...
shanx910
2 years, 7 months ago
A create new version
upvoted 1 times
...
...
Teyo
2 years, 7 months ago
Selected Answer: C
C is correct as you can use tags and then set firewall rules for instances with such tag.
upvoted 2 times
...
Vidyaji
2 years, 9 months ago
C IS PERFECT
upvoted 2 times
...
vishnukumartr
2 years, 9 months ago
C. Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port 636 for that network tag.
upvoted 2 times
...
alaahakim
2 years, 9 months ago
C is Correct
upvoted 2 times
...
devopsbatch
3 years, 3 months ago
C A tag is simply a character string added to a tags field in a resource, such as Compute Engine virtual machine (VM) instances or instance templates. A tag is not a separate resource, so you cannot create it separately. All resources with that string are considered to have that tag. Tags enable you to make firewall rules and routes applicable to specific VM instances.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago