Correct Answer: Analyze logs and create a Cloud Armor Security Policy rule
Cloud Armor allows you to create and apply security policies in real-time, including blocking specific IP ranges, geographic regions, or patterns matching malicious bot traffic....
Correct Answer
Analyze logs and create a Cloud Armor Security Policy rule
Why This Answer Is Correct
Cloud Armor allows you to create and apply security policies in real-time, including blocking specific IP ranges, geographic regions, or patterns matching malicious bot traffic.
This question evaluates your knowledge of Google Cloud Armor — a core concept tested in Professional Cloud Architect. Understanding Google Cloud Armor is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
A company wants to ensure that its public-facing API is protected against SQL injection, cross-site scripting (XSS), and common bot attacks. Which service provides these web application firewall (WAF) capabilities?
What is the primary way to protect a Cloud Run service from large-scale L7 DDoS attacks while still allowing legitimate global traffic?
You are hosting a web application on GCE with a global load balancer. You suspect a Layer 7 DDoS attack targeting a specific URL path. What is the fastest way to mitigate the attack?