An organization needs protection against distributed denial-of-service (DDoS) attacks. Which Google Cloud service should the organization use?

Google Cloud Armor defends applications against DDoS attacks by detecting and blocking malicious traffic at the network edge using Google's global infrastructure. It integrates with Cloud Load Balancing to enforce security policies before traffic reaches backend services.

Cloud Build is a CI/CD pipeline service used to build, test, and deploy software; it provides no DDoS protection functionality.

Cloud VPN creates encrypted tunnels between on-premises networks and Google Cloud, addressing secure connectivity rather than DDoS mitigation.

Security Command Center is a security management and risk platform for discovering vulnerabilities and threats, but it does not actively block DDoS traffic.