Your company uses web application firewall (WAF) capabilities from a third-party cloud WAF provider. This WAF provider proxies all the HTTPS connections from internet clients, applies security…

Question

Options

• A
  1. Create a new Cloud Armor network edge security policy. In the policy, set the
• B
  1. Create a new Cloud Armor network edge security policy. In the policy, set the
• C
  1. Create a new Cloud Armor backend security policy. In the policy, set the
• D
  1. Create a new Cloud Armor backend security policy. In the policy, set the

• A
  15% (3)
• B
  5% (1)
• C
  75% (15)
• D
  5% (1)

Explanation

A backend security policy is required because the Cloud Armor rules must apply to traffic after it passes through the third-party WAF and reaches the backend service. The userIpRequestHeaders[] attribute extracts the original client IP from headers inserted by the WAF (e.g., X-Forwarded-For). The rule checks if the client's IP falls within the IP_RANGE_BLOCK range and denies the traffic. This ensures Cloud Armor blocks traffic based on the actual client IP, as the third-party WAF creates a new connection using its IP for proxied traffic.

No community discussion yet for this question.