Question 22

Question

In your Google Cloud organization, you have two folders: Dev and Prod. You want a scalable and
consistent way to enforce the following firewall rules for all virtual machines (VMs) with minimal
cost:
Port 8080 should always be open for VMs in the projects in the Dev folder.
Any traffic to port 8080 should be denied for all VMs in your projects in the Prod folder.
What should you do?

Accepted Answer

Create and associate a firewall policy with the Dev folder with a rule to open port 8080. Create
and associate a firewall policy with the Prod folder with a rule to deny traffic to port 8080.

Liam · Answer

A

Nora · Answer

Had something just like this in a mock and A lined up with the scalable part of the requirement. A

Ben F. · Answer

A , folder-level policy is the only scalable option here. C would be a trap if you miss new VPCs.

Anita F. · Answer

For anyone picking C, how would you handle new projects or VPCs added under the folders? Folder-level policy (A) seems easier to maintain at scale.

Vikram E. · Answer

Probably A, since applying policies at the folder level scales best for multiple projects. Open to a counterpoint if someone sees it different.

Google Professional Cloud Network Engineer Real Exam Questions [October 2026 Update] Quiz

Premium Access Includes