You created a new VPC and want to allow access only via SSH. How should you configure firewall rules?

The correct answer is to create a single firewall rule to allow port 22 with priority 1000. Google Cloud VPC networks have an implicit deny egress rule and an implicit allow ingress rule for all traffic, which means you only need to explicitly allow the traffic you want. To allow SSH access, you create an ingress firewall rule that permits TCP traffic on port 22. Priority 1000 is the default and a common choice for custom rules, ensuring it's evaluated before lower-priority rules. The first incorrect option is wrong because an implicit deny egress rule already exists, and setting a block-all rule with priority 0 would block all traffic, including the SSH rule with priority 1000. The second incorrect option is wrong for the same reason regarding blocking all traffic, and also because port 3389 is for RDP, not SSH. The last incorrect option is wrong because port 3389 is for RDP, not SSH.