Correct Answer: Create a Cloud Armor security rule to block the specific URL path
Cloud Armor security policies can be updated in real-time to block specific traffic patterns, protecting the backend from L7 attacks....
Correct Answer
Create a Cloud Armor security rule to block the specific URL path
Why This Answer Is Correct
Cloud Armor security policies can be updated in real-time to block specific traffic patterns, protecting the backend from L7 attacks.
This question evaluates your knowledge of Google Cloud Armor — a core concept tested in Professional Cloud Architect. Understanding Google Cloud Armor is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
A company wants to ensure that its public-facing API is protected against SQL injection, cross-site scripting (XSS), and common bot attacks. Which service provides these web application firewall (WAF) capabilities?
Your company is running a massive e-commerce site on GCE with a global HTTP(S) LB. During a promotional event, you suspect a bot-driven L7 DDoS attack. What is the fastest way to respond and block the malicious traffic patterns?
What is the primary way to protect a Cloud Run service from large-scale L7 DDoS attacks while still allowing legitimate global traffic?