PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #67
Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a…
The correct answer is A. Create a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service. Google Cloud Armor security policies are available only for backend services behind an external HTTP(S) load balancer, TCP proxy load balancer, or an SSL proxy load balancer. The load balancer can be in Premium Tier or Standard Tier…
Question
Options
- ACreate a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service.
- BCreate a VPC Firewall rule that blocks all traffic except for the traffic-scrubbing service.
- CCreate a VPC Service Control Perimeter that blocks all traffic except for the traffic-scrubbing
- DCreate IPTables firewall rules that block all traffic except for the traffic-scrubbing service.
How the community answered
(24 responses)- A75% (18)
- B8% (2)
- C4% (1)
- D13% (3)
Explanation
Google Cloud Armor security policies are available only for backend services behind an external HTTP(S) load balancer, TCP proxy load balancer, or an SSL proxy load balancer. The load balancer can be in Premium Tier or Standard Tier. https://cloud.google.com/armor/docs/security-policy-overview
Topics
Community Discussion
No community discussion yet for this question.