PCNE Implementing a Virtual Private Cloud Practice Question
A company has a VPC with firewall rules. They want to ensure that only traffic from known IP ranges can access their web server instances. Which two firewall rule configurations are appropriate? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ingress rule with source IP range of the company's public IPs and allow tcp:443
Options A and C are correct. Ingress firewall rules with source IP ranges limited to the company's known public IPs on ports 443 (HTTPS) and 80 (HTTP) ensure that only traffic from those IPs can access the web server instances. Option B is incorrect because source range 0.0.0.0/0 allows all IPs, which does not restrict to known IPs. Option D is incorrect because source tags identify target instances, not source IPs. Option E is incorrect because ingress rules use source IP ranges, not destination IP ranges, to restrict incoming traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Ingress rule with source IP range of the company's public IPs and allow tcp:443
Why this is correct
Restricts HTTPS traffic to company IPs.
- ✗
Ingress rule with source IP range 0.0.0.0/0 and allow tcp:80
Why it's wrong here
Allows all traffic, not just known IPs.
- ✓
Ingress rule with source IP range of the company's public IPs and allow tcp:80
Why this is correct
Restricts HTTP traffic to company IPs.
- ✗
Ingress rule with source tag 'web' and allow tcp:80
Why it's wrong here
Tags on source are not used; source tags are for target instances.
- ✗
Ingress rule with destination IP range 0.0.0.0/0 and allow tcp:80
Why it's wrong here
Ingress rules use source IP, not destination.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNE question from scratch — 961 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.