Google
PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #125
You are designing a new global application using Compute Engine instances that will be exposed by a global HTTP(S) load balancer. You need to secure your application from distributed denial…
The correct answer is B. Configure a Google Cloud Armor security policy in your project, and attach it to the backend. https://cloud.google.com/armor Security policies to help protect your load-balanced applications from distributed denial of service (DDoS) and other web-based attacks.
Submitted by suresh_in· Apr 18, 2026Implementing network security
Question
You are designing a new global application using Compute Engine instances that will be exposed by a global HTTP(S) load balancer. You need to secure your application from distributed denial- of-service and application layer (layer 7) attacks. What should you do?
Options
- AConfigure VPC Service Controls and create a secure perimeter. Define fine-grained perimeter
- BConfigure a Google Cloud Armor security policy in your project, and attach it to the backend
- CConfigure VPC firewall rules to protect the Compute Engine instances against distributed denial-
- DConfigure hierarchical firewall rules for the global HTTP(S) load balancer public IP address at the
How the community answered
(17 responses)- A6% (1)
- B76% (13)
- C6% (1)
- D12% (2)
Explanation
https://cloud.google.com/armor Security policies to help protect your load-balanced applications from distributed denial of service (DDoS) and other web-based attacks.
Topics
#Cloud Armor#DDoS Protection#WAF#HTTP(S) Load Balancer Security
Community Discussion
No community discussion yet for this question.