Which attribute of a firewall rule would you use to apply it only to a specific set of VMs in a VPC (e.g., all VMs with the label 'web-server')?

You need stateful firewall rules at the Google Compute Engine instance level. What should you configure?

How does Google Cloud process firewall rules regarding 'Priority'?

What is the implied default behavior for INGRESS traffic in a newly created VPC?

What is the implied default behavior for EGRESS traffic in a Google Cloud VPC?

An administrator wants to block all traffic from a specific malicious IP address to their web servers. Which firewall configuration should they use?