PCNE Implementing VPC Instances Practice Question
An engineer has configured a firewall rule with priority 1000 that allows ingress traffic on TCP port 443 from source IP range 10.0.0.0/8. Another rule with priority 500 denies ingress on TCP port 443 from source IP 10.0.1.0/24. What will happen to traffic from 10.0.1.5 destined to the instance on port 443?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The traffic is denied because the deny rule has higher priority
Firewall rules are evaluated by priority (lower number = higher priority). Rule with priority 500 (deny) takes precedence over priority 1000 (allow). So traffic from 10.0.1.5 is denied.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The traffic is allowed because allow rules override deny rules
Why it's wrong here
In GCP, deny rules can override allow rules if priority is higher.
- ✗
The traffic is allowed because the allow rule covers a broader range
Why it's wrong here
Priority determines which rule applies, not specificity.
- ✗
The traffic is denied only if the instance has a tag matching the deny rule
Why it's wrong here
The deny rule does not specify tags; it applies to all instances.
- ✓
The traffic is denied because the deny rule has higher priority
Why this is correct
Correct. The deny rule (priority 500) has higher priority than the allow rule (priority 1000).
Go deeper
Related to this question
About these practice questions
This PCNE question is part of Courseiva's 961-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.