You need to explicitly deny traffic from a specific IP address to your Google Compute Engine instances. Can VPC Firewall Rules natively handle explicit deny rules?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: No, use Cloud Armor or equivalent for explicit deny rules

VPC Firewall Rules typically support allow rules only. Cloud Armor support both allow and deny rules, making them suitable for blocking unwanted IP addresses....

📋Part of Professional Cloud Developer · GCP Certification Practice

Real Exam ScenarioCloud Armor

You need to explicitly deny traffic from a specific IP address to your Google Compute Engine instances. Can VPC Firewall Rules natively handle explicit deny rules?

✓ Correct Answer & ExplanationCloud Armor

Correct Answer

No, use Cloud Armor or equivalent for explicit deny rules

Why This Answer Is Correct

VPC Firewall Rules typically support allow rules only. Cloud Armor support both allow and deny rules, making them suitable for blocking unwanted IP addresses.

📚 What This Question Tests

This question evaluates your knowledge of Cloud Armor — a core concept tested in Professional Cloud Developer. Understanding Cloud Armor is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.

All Professional Cloud Developer Questions →Browse All GCP Exams →

You need to explicitly deny traffic from a specific IP address to your Google Compute Engine instances. Can VPC Firewall Rules natively handle explicit deny rules?

You need to explicitly deny traffic from a specific IP address to your Google Compute Engine instances. Can VPC Firewall Rules natively handle explicit deny rules?

📚 What This Question Tests

More Cloud Armor Practice Questions