Q: 6
You are in charge of migrating a legacy application from your company datacenters to GCP before the
current maintenance contract expires. You do not know what ports the application is using and no
documentation is available for you to check. You want to complete the migration without putting
your environment at risk.
What should you do?
Options
Discussion
Option A
A
A
Anyone try checking the official Google practice exams or docs for scenarios like this? Usually helps nail these migration details.
A/B? B looks safer at first since it blocks all traffic, but the question asks to avoid risk and still allow migration without breaking things. A lets you monitor actual usage in an isolated project with allowed internal TCP, so I'd go with A. Not 100% though, could see why some would pick B.
B makes more sense to me because it blocks all traffic first, so you can observe exactly what's needed from logs before opening anything. It feels safer than A since you're not allowing all TCP by default, which could be risky if unknown services are running. Pretty sure exam questions like this want strict controls out of the gate. Let me know if I'm missing a downside here.
A tbh, but I'd double-check the official guide and do practice exams for this type.
B not A
A
A tbh. You need the app running to see what ports it uses and VPC Flow logs only work if traffic happens, so blocking everything with B doesn't help at first. Isolated project plus monitoring is safer in practice.
Be respectful. No spam.
