You deployed an LDAP server on a VM reachable via TLS on UDP port 636. You must ensure clients can reach it on that port. What should you do?

To allow external traffic to reach your LDAP server, you need to configure a firewall rule. Google Cloud firewall rules control traffic to and from VM instances. The correct approach involves two steps: 1. Tag the VM: Apply a network tag (e.g., ldap-server) to your LDAP VM instance. This tag acts as a label that firewall rules can reference. 2. Create an Ingress Firewall Rule: Create a new firewall rule that allows incoming (ingress) UDP traffic on port 636. This rule should specify the network tag you applied to the LDAP VM, ensuring it only applies to that specific instance. Incorrect options: Adding a network tag alone (allow-udp-636) doesn't create a firewall rule; it's just a label. Creating a route is for directing traffic between networks or to specific next hops, not for opening ports. An egress rule controls outgoing traffic from the VM, but you need to allow incoming traffic to the LDAP server.