What is the primary way to protect a Cloud Run service from large-scale L7 DDoS attacks while still allowing legitimate global traffic?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Deploy an HTTP(S) Load Balancer in front of Cloud Run and enable Cloud Armor

Cloud Run integrates with the HTTP(S) Global Load Balancer, which allows you to apply Cloud Armor security policies at the edge to block malicious traffic....

๐Ÿ“‹Part of Professional Cloud Architect ยท GCP Certification Practice
Real Exam ScenarioGoogle Cloud Armor

What is the primary way to protect a Cloud Run service from large-scale L7 DDoS attacks while still allowing legitimate global traffic?

โœ“ Correct Answer & ExplanationGoogle Cloud Armor

Correct Answer

Deploy an HTTP(S) Load Balancer in front of Cloud Run and enable Cloud Armor

Why This Answer Is Correct

Cloud Run integrates with the HTTP(S) Global Load Balancer, which allows you to apply Cloud Armor security policies at the edge to block malicious traffic.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Google Cloud Armor โ€” a core concept tested in Professional Cloud Architect. Understanding Google Cloud Armor is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.