Exam Professional Cloud Network Engineer topic 1 question 126 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 126
Topic #: 1

[All Professional Cloud Network Engineer Questions]

You have the following firewall ruleset applied to all instances in your Virtual Private Cloud (VPC):

You need to update the firewall rule to add the following rule to the ruleset:

You are using a new user account. You must assign the appropriate identity and Access Management (IAM) user roles to this new user account before updating the firewall rule. The new user account must be able to apply the update and view firewall logs. What should you do?

A. Assign the compute.securityAdmin and logging.viewer rule to the new user account. Apply the new firewall rule with a priority of 50.
B. Assign the compute.securityAdmin and logging.bucketWriter role to the new user account. Apply the new firewall rule with a priority of 150.
C. Assign the compute.orgSecurityPolicyAdmin and logging.viewer role to the new user account. Apply the new firewall rule with a priority of 50.
D. Assign the compute.orgSecurityPolicyAdmin and logging.bucketWriter role to the new user account. Apply the new firewall rule with a priority of 150.

Show Suggested Answer

Suggested Answer: A 🗳️

by ccieman2016 at Dec. 3, 2022, 1:14 p.m.

Comments

Submit Cancel

ccieman2016

Highly Voted 11 months ago

Selected Answer: A

A is correct. https://cloud.google.com/logging/docs/access-control

upvoted 5 times

...

SZON

Most Recent 7 months, 3 weeks ago

A is the one

upvoted 2 times

...

pk349

9 months, 2 weeks ago

• A. Assign the compute.securityAdmin and logging.viewer rule to the new user account. Apply the new firewall rule with a priority of 50.

upvoted 1 times

...

Rightsaidfred

10 months, 2 weeks ago

Selected Answer: A

Agree with A

upvoted 3 times

...

AzureDP900

10 months, 3 weeks ago

A perfectly make sense.