Correct Answer: No, use Cloud Armor or equivalent for explicit deny rules
VPC Firewall Rules typically support allow rules only. Cloud Armor support both allow and deny rules, making them suitable for blocking unwanted IP addresses....
Correct Answer
No, use Cloud Armor or equivalent for explicit deny rules
Why This Answer Is Correct
VPC Firewall Rules typically support allow rules only. Cloud Armor support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
This question evaluates your knowledge of Cloud Armor — a core concept tested in Professional Cloud DevOps Engineer. Understanding Cloud Armor is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to explicitly deny traffic from a specific IP address to your Google Compute Engine instances. Can VPC Firewall Rules natively handle explicit deny rules?
You need stateless firewall rules at the subnet level in your Virtual Private Cloud (VPC). What should you configure?
Which service provides protection against Distributed Denial of Service (DDoS) attacks for applications behind a Google Cloud Load Balancer?
Can Cloud Armor block specific IP addresses from accessing your web server?
How does Cloud Armor handle SQL injection attacks?