PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #220
Your organization's security team recently discovered that there is a high risk of malicious activities originating from some of your VMs connected to the internet. These malicious activities are curr
The correct answer is D. Use Cloud NGFW Enterprise. Create a firewall rule for egress traffic with the --tls-inspect flag,. To inspect encrypted TLS traffic, Google Cloud's Cloud NGFW Enterprise is the appropriate solution. Cloud NGFW (Next-Generation Firewall) offers TLS inspection capabilities, allowing you to inspect outbound TLS traffic from VMs. By creating a firewall rule for egress traffic with
Question
Options
- AEnable Cloud Armor TLS inspection policy, and associate the policy with the backend VMs.
- BUse Cloud NGFW Essentials. Create a firewall rule for egress traffic, and enable VPC Flow Logs
- CConfigure a TLS agent on every VM to intercept TLS traffic before it reaches the internet.
- DUse Cloud NGFW Enterprise. Create a firewall rule for egress traffic with the --tls-inspect flag,
How the community answered
(23 responses)- A4% (1)
- B4% (1)
- C13% (3)
- D78% (18)
Explanation
To inspect encrypted TLS traffic, Google Cloud's Cloud NGFW Enterprise is the appropriate solution. Cloud NGFW (Next-Generation Firewall) offers TLS inspection capabilities, allowing you to inspect outbound TLS traffic from VMs. By creating a firewall rule for egress traffic with the -- tls-inspect flag, you ensure that TLS traffic is decrypted and analyzed for potential malicious activity before it reaches external destinations.
Topics
Community Discussion
No community discussion yet for this question.