PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #249
PROFESSIONAL-CLOUD-NETWORK-ENGINEER Question #249: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER to reveal the answer and full explanation for question #249. The question stem and answer options stay visible for context.
Question
Your company uses web application firewall (WAF) capabilities from a third-party cloud WAF provider. This WAF provider proxies all the HTTPS connections from internet clients, applies security policies, and then opens a new HTTPS connection to the public IP address of your global Application Load Balancer in Google Cloud. Your Google Cloud workloads are the backend of this global Application Load Balancer. Currently, Cloud Am1or is not configured. You need to create a Cloud Armor security policy that blocks sessions that originate from internet clients with source IP addresses that belong to the IP_RANGE_BLOCK IP range. The block must be executed by the Cloud Armor security policy; it will not be done by the third-party cloud WAF provider. Whal should you do?
Options
- A1. Create a new Cloud Armor network edge security policy. In the policy, set the
- B1. Create a new Cloud Armor network edge security policy. In the policy, set the
- C1. Create a new Cloud Armor backend security policy. In the policy, set the
- D1. Create a new Cloud Armor backend security policy. In the policy, set the
Unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-NETWORK-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.