Which two implied firewall rules are defined on a VPC network? (Choose two.)

Every Virtual Private Cloud (VPC) network has two implied firewall rules that cannot be removed. The first is an "implied allow egress" rule with the lowest possible priority (65535) that permits all outbound traffic from any instance. The second is an "implied deny ingress" rule, also with priority 65535, that blocks all incoming traffic to any instance. These defaults establish a secure baseline where instances can initiate connections but cannot receive unsolicited inbound connections until explicit "allow" rules are created.

C. Blocking outbound port 25 is a specific rule applied to Compute Engine, not a general implied VPC rule for all traffic.
D. This is the opposite of the implied egress rule; the implied rule allows, not blocks, all outbound connections.
E. Allowing inbound port 80 is a common user-created rule to permit web traffic, but it is not an implied default rule.

1. Google Cloud Documentation

"VPC firewall rules"

Section: "Implied rules". This section explicitly lists the two implied rules: "An allow egress rule for all destinations (0.0.0.0/0)" and "A deny ingress rule for all sources (0.0.0.0/0)".

2. Google Cloud Documentation

"Firewall rules overview"

Section: "Pre-defined rules in the default network". This section distinguishes between the unremovable "implied rules" and the pre-populated (but deletable) rules in the default network.

3. Google Cloud Documentation

"Always-on firewall rules"

Section: "Implied IPv4 firewall rules". This table details the priority (65535)

action (ALLOW/DENY)

direction (EGRESS/INGRESS)

and targets of the two implied rules.