A company wants to ensure that its public-facing API is protected against SQL injection, cross-site scripting (XSS), and common bot attacks. Which service provides these web application firewall (WAF) capabilities?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Google Cloud Armor

Cloud Armor includes pre-configured WAF rules (WAF-as-a-service) to protect against the OWASP Top 10 and other L7 attacks....

๐Ÿ“‹Part of Professional Cloud Architect ยท GCP Certification Practice
Real Exam ScenarioGoogle Cloud Armor

A company wants to ensure that its public-facing API is protected against SQL injection, cross-site scripting (XSS), and common bot attacks. Which service provides these web application firewall (WAF) capabilities?

โœ“ Correct Answer & ExplanationGoogle Cloud Armor

Correct Answer

Google Cloud Armor

Why This Answer Is Correct

Cloud Armor includes pre-configured WAF rules (WAF-as-a-service) to protect against the OWASP Top 10 and other L7 attacks.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Google Cloud Armor โ€” a core concept tested in Professional Cloud Architect. Understanding Google Cloud Armor is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.