Limit inbound traffic to web servers to HTTP/HTTPS (TCP only). How should you configure the VPC firewall rules?
Choose an answer
Tap an option to check your answer.
Correct answer: Create an allow ingress firewall rule with target tag "web-server" to allow all IP addresses for TCP ports 80 and 443..
Why this is the answer
The correct answer is to create an allow ingress firewall rule with target tag "web-server" to allow all IP addresses for TCP ports 80 and 443. This is because "ingress" rules control incoming traffic, which is necessary to limit inbound connections. Web servers typically use HTTP (port 80) and HTTPS (port 443) for web traffic. Applying a "target tag" ensures the rule only applies to VMs with that specific tag, effectively isolating the web servers. Allowing "all IP addresses" (0.0.0.0/0) means traffic can originate from anywhere on the internet. The first incorrect option only allows port 80, omitting HTTPS (port 443). The second and fourth incorrect options specify "egress" rules, which control outgoing traffic, not inbound. Additionally, the fourth option incorrectly limits the source to "web server IP addresses," which would prevent external users from accessing the web servers.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed