Your company has a 3-tier solution running on Compute Engine.

The configuration of the current infrastructure is shown below.

Each tier has a service account that is associated with all instances within it.

You need to enable communication on TCP port 8080 between tiers as follows: Instances in tier #1 must communicate with tier #2

Instances in tier #2 must communicate with tier #3

What should you do?

Question

Your company has a 3-tier solution running on Compute Engine.

The configuration of the current infrastructure is shown below.

¢ ) Google Cloud Platform

VPC

Subnet Tier#1 10.0.1.0/24

Instance Tier 1
Compute Engine

Subnet Tier#2 10.0.2.0/24

Instance Tier 2
Compute Engine

Subnet Tier#3 10.0.3.0/24

Instance Tier 3
Compute Engine

Each tier has a service account that is associated with all instances within it.

You need to enable communication on TCP port 8080 between tiers as follows: Instances in tier #1 must communicate with tier #2

Instances in tier #2 must communicate with tier #3

What should you do?

Exam-Answer · Accepted Answer

1. Create an ingress firewall rule with the following settings: ¢ Targets: all instances with tier #2 service account ¢ Source filter: all instances with tier #1 service account ¢ Protocols: allow TCP:8080 2. Create an ingress firewall rule with the following settings: ¢ Targets: all instances with tier #3 service account ¢ Source filter: all instances with tier #2 service account ¢ Protocols: allow TCP: 8080

Question 53 of 179 from exam ACE: Associate Cloud Engineer

Question

Answers

Explanations