ACE Question 52

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  b is the correct answer

• Chose B1

  ANSWER B is the correct answer because it creates ingress firewall rules that allow communication between the instances in the different tiers on TCP port 8080, based on their associated service accounts. The first rule allows traffic from instances in Tier#1 with the Tier#1 service account to instances in Tier#2 with the Tier#2 service account. The second rule allows traffic from instances in Tier#2 with the Tier#2 service account to instances in Tier#3 with the Tier#3 service account. This ensures that only the appropriate instances can communicate with each other.

• 4

  ANSWER A is incorrect because it creates ingress firewall rules to allow communication between instances based on the IP ranges of their respective subnets. However, this doesn't guarantee that only instances in the desired tiers will be able to communicate with each other. Other instances outside the desired tiers that happen to be in the same subnet ranges will also be able to communicate. ANSWER C is incorrect because it also allows all protocols for communication between instances in the desired tiers. This may not be desirable from a security standpoint, as it can potentially allow for unauthorized access or communication between instances. ANSWER D is incorrect because it creates egress firewall rules instead of ingress rules. Egress rules control outbound traffic from instances, whereas ingress rules control inbound traffic. In this case, we need to control inbound traffic to allow communication between tiers on TCP port 8080.