Summer Sale Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 45285der6

You have an application where the frontend is deployed on a managed instance group in...

  1. Home
  2. Google
  3. Google Cloud Certified
  4. Professional-Cloud-Security-Engineer
  5. Professional-Cloud-Security-Engineer Questions
  6. Google Cloud Certified - Professional Cloud Security Engineer Practice Questions

You have an application where the frontend is deployed on a managed instance group in subnet A and the data layer is stored on a mysql Compute Engine virtual machine (VM) in subnet B on the same VPC. Subnet A and Subnet B hold several other Compute Engine VMs. You only want to allow thee application frontend to access the data in the application's mysql instance on port 3306.

What should you do?

A.

Configure an ingress firewall rule that allows communication from the src IP range of subnet A to the tag "data-tag" that is applied to the mysql Compute Engine VM on port 3306.

B.

Configure an ingress firewall rule that allows communication from the frontend's unique service account to the unique service account of the mysql Compute Engine VM on port 3306.

C.

Configure a network tag "fe-tag" to be applied to all instances in subnet A and a network tag "data-tag" to be applied to all instances in subnet B. Then configure an egress firewall rule that allows communication from Compute Engine VMs tagged with data-tag to destination Compute Engine VMs tagged fe-tag.

D.

Configure a network tag "fe-tag" to be applied to all instances in subnet A and a network tag "data-tag" to be applied to all instances in subnet B. Then configure an ingress firewall rule that allows communication from Compute Engine VMs tagged with fe-tag to destination Compute Engine VMs tagged with data-tag.

Google Professional-Cloud-Security-Engineer View All Questions

Google Professional-Cloud-Security-Engineer Summary

  • Vendor: Google
  • Product: Professional-Cloud-Security-Engineer
  • Update on: Sep 16, 2025
  • Questions: 266
Price: $52.5  $149.99
Buy Now Professional-Cloud-Security-Engineer PDF + Testing Engine Pack
Next
In an effort for your company messaging app to comply with FIPS 140-2, a decision...
Your Google Cloud environment has one organization node, one folder named Apps.
Previous

Payments We Accept

Your purchase with ExamsVCE is safe and fast. Your products will be available for immediate download after your payment has been received.
The ExamsVCE website is protected by 256-bit SSL from McAfee, the leader in online security.

examsvce payment method

Contact Us

Copyright © 2013-2025 examsvce.com. All Rights Reserved
mcafee secure

TESTED 16 Sep 2025