Scenario: You are designing a multi-tier web application. You need a way to ensure that the database tier can only be accessed by the application tier, and the application tier can only be accessed by the load balancer. How would you do this in GCP?

You need stateful firewall rules at the Google Compute Engine instance level. What should you configure?

How does Google Cloud process firewall rules regarding 'Priority'?

Which attribute of a firewall rule would you use to apply it only to a specific set of VMs in a VPC (e.g., all VMs with the label 'web-server')?

What is the implied default behavior for INGRESS traffic in a newly created VPC?

What is the implied default behavior for EGRESS traffic in a Google Cloud VPC?