Correct Answer: A set of rules that allow or deny traffic based on IP addresses, geographical locations, or custom expressions
Cloud Armor security policies consist of rules that evaluate incoming HTTP(S) traffic based on IP address ranges, geographic location, or custom expression parameters to block mali...
Correct Answer
A set of rules that allow or deny traffic based on IP addresses, geographical locations, or custom expressions
Why This Answer Is Correct
Cloud Armor security policies consist of rules that evaluate incoming HTTP(S) traffic based on IP address ranges, geographic location, or custom expression parameters to block malicious attacks.
This question evaluates your knowledge of Google Cloud Armor — a core concept tested in Associate Cloud Engineer. Understanding Google Cloud Armor is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
Which Google Cloud service provides Web Application Firewall (WAF) and DDoS mitigation for applications behind an HTTP(S) load balancer?
Which Cloud Armor feature provides built-in protection against common web vulnerabilities defined by the OWASP Top 10?
What is 'Adaptive Protection' in Cloud Armor?
Can Cloud Armor be used to block traffic from an entire country?