nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #67

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a…

The correct answer is A. Create a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service. Google Cloud Armor security policies are available only for backend services behind an external HTTP(S) load balancer, TCP proxy load balancer, or an SSL proxy load balancer. The load balancer can be in Premium Tier or Standard Tier…

Submitted by kavita_s· Apr 18, 2026Implementing network security

Question

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a traffic-scrubbing service and want to restrict your origin to allow connections only from the traffic-scrubbing service. What should you do?

Options

  • ACreate a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service.
  • BCreate a VPC Firewall rule that blocks all traffic except for the traffic-scrubbing service.
  • CCreate a VPC Service Control Perimeter that blocks all traffic except for the traffic-scrubbing
  • DCreate IPTables firewall rules that block all traffic except for the traffic-scrubbing service.

How the community answered

(24 responses)
  • A
    75% (18)
  • B
    8% (2)
  • C
    4% (1)
  • D
    13% (3)

Explanation

Google Cloud Armor security policies are available only for backend services behind an external HTTP(S) load balancer, TCP proxy load balancer, or an SSL proxy load balancer. The load balancer can be in Premium Tier or Standard Tier. https://cloud.google.com/armor/docs/security-policy-overview

Topics

#Cloud Armor#Global Load Balancer#IP Whitelisting#Network Security

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice