Firewall rules concept in GCP - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify the direction of the firewall rule.

GCP

resource "google_compute_firewall" "default" {
  name    = "allow-internal"
  network = "default"
  direction = "[1]"
}

Drag options to blanks, or click blank then click option'

AOUTBOUND

BEGRESS

CINBOUND

DINGRESS

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'INBOUND' or 'OUTBOUND' which are not valid values in GCP firewall rules.

The direction field in a firewall rule specifies if the rule applies to incoming (INGRESS) or outgoing (EGRESS) traffic.

2fill in blank

medium

Complete the code to allow TCP traffic on port 80.

GCP

resource "google_compute_firewall" "http" {
  name    = "allow-http"
  network = "default"
  allow {
    protocol = "[1]"
    ports    = ["80"]
  }
}

Drag options to blanks, or click blank then click option'

Ahttp

Budp

Ctcp

Dicmp

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'http' as a protocol which is not valid in firewall rules.

The protocol field specifies the network protocol. For web traffic on port 80, TCP is used.

3fill in blank

hard

Fix the error in the source range specification to allow traffic from any IP.

GCP

resource "google_compute_firewall" "allow-all" {
  name    = "allow-all"
  network = "default"
  allow {
    protocol = "tcp"
    ports    = ["0-65535"]
  }
  source_ranges = ["[1]"]
}

Drag options to blanks, or click blank then click option'

Aany

B0.0.0.0/0

C0.0.0.0

D255.255.255.255/32

Attempts:

3 left

💡 Hint

Common Mistakes

Using '0.0.0.0' without CIDR suffix which is invalid.

Using 'any' which is not accepted.

The source_ranges field requires a CIDR notation. To allow all IPs, use '0.0.0.0/0'.

4fill in blank

hard

Fill both blanks to create a firewall rule that denies all egress UDP traffic.

GCP

resource "google_compute_firewall" "deny-udp-egress" {
  name    = "deny-udp-egress"
  network = "default"
  direction = "[1]"
  deny {
    protocol = "[2]"
  }
}

Drag options to blanks, or click blank then click option'

AEGRESS

BINGRESS

Cudp

Dtcp

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing INGRESS and EGRESS directions.

Using TCP instead of UDP.

To block outgoing UDP traffic, set direction to 'EGRESS' and protocol to 'udp' in the deny block.

5fill in blank

hard

Fill all three blanks to create a firewall rule allowing SSH from a specific IP range.

GCP

resource "google_compute_firewall" "allow-ssh" {
  name    = "allow-ssh"
  network = "default"
  direction = "[1]"
  allow {
    protocol = "[2]"
    ports    = ["[3]"]
  }
  source_ranges = ["192.168.1.0/24"]
}

Drag options to blanks, or click blank then click option'

AINGRESS

Btcp

C22

DEGRESS

Attempts:

3 left

💡 Hint

Common Mistakes

Setting direction to EGRESS instead of INGRESS.

Using wrong protocol or port.

SSH uses TCP protocol on port 22 and is usually allowed for incoming (INGRESS) traffic.