Correct Answer: Edge service; protection is enforced at Google's global points of presence before the traffic reaches the VPC
Cloud Armor is an edge-based security service integrated with Global External HTTP(S) Load Balancers, filtering traffic at Google's global points of presence before it reaches the ...
Correct Answer
Edge service; protection is enforced at Google's global points of presence before the traffic reaches the VPC
Why This Answer Is Correct
Cloud Armor is an edge-based security service integrated with Global External HTTP(S) Load Balancers, filtering traffic at Google's global points of presence before it reaches the VPC.
This question evaluates your knowledge of Google Cloud Armor — a core concept tested in Associate Cloud Engineer. Understanding Google Cloud Armor is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
Which Google Cloud service provides Web Application Firewall (WAF) and DDoS mitigation for applications behind an HTTP(S) load balancer?
What is a 'Security Policy' in Cloud Armor?
Which Cloud Armor feature provides built-in protection against common web vulnerabilities defined by the OWASP Top 10?
What is 'Adaptive Protection' in Cloud Armor?