Your company uses Compute Engine instances that are exposed to the public internet. Each compute instance has a single network interface with a single public IP address. You need to block any…

Question

Options

• ACreate a new Cloud Armor backend security policy, and use the --network-src-asns parameter.
• BCreate a new Cloud Armor network edge security policy, and use the --network-src-asns
• CCreate a new Cloud Armor edge security policy, and use the --network-src-asns parameter.
• DCreate a new firewall policy ingress rule, and use the --network-src-asns parameter.

• A
  14% (2)
• B
  71% (10)
• C
  7% (1)
• D
  7% (1)

Explanation

Cloud Armor Network Edge Security Policy: A network edge security policy in Cloud Armor allows you to enforce access control at the edge of Google's network, even before traffic reaches your Compute Engine instances. It is ideal for blocking traffic based on specific BGP Autonomous System Numbers (ASNs) at the edge. Blocking Traffic by ASN: The --network-src-asns parameter in a Cloud Armor network edge security policy enables you to specify the ASNs that you want to block. This effectively stops connection attempts originating from internet clients belonging to the specified ASNs before they reach your resources.

No community discussion yet for this question.