Question 199 of 318
Single answerYour Google Cloud organization allows for administrative capabilities to be distributed to each team through provision of a Google Cloud project with Owner role (roles/owner). The organization contains thousands of Google Cloud projects. Security Command Center Premium has surfaced multiple OPEN_MYSQL_PORT findings. You are enforcing the guardrails and need to prevent these types of common misconfigurations.
What should you do?
ACreate a hierarchical firewall policy configured at the organization to deny all connections from 0.0.0.0/0.
✓BCreate a hierarchical firewall policy configured at the organization to allow connections only from internal IP ranges.
CCreate a Google Cloud Armor security policy to deny traffic from 0.0.0.0/0.
DCreate a firewall rule for each virtual private cloud (VPC) to deny traffic from 0.0.0.0/0 with priority 0.
✓
Correct Answer: B
Create a hierarchical firewall policy configured at the organization to allow connections only from internal IP ranges.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.