Question 71 of 315
Single answerYour web application has several VM instances running within a VPC. You want to restrict communications between instances to only the paths and ports you authorize, but you don't want to rely on static IP addresses or subnets because the app can autoscale. How should you restrict communications?
AUse separate VPCs to restrict traffic
✓BUse firewall rules based on network tags attached to the compute instances
CUse Cloud DNS and only allow connections from authorized hostnames
DUse service accounts and configure the web application to authorize particular service accounts to have access
✓
Correct Answer: B
Use firewall rules based on network tags attached to the compute instances
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.