You plan to use a Google Cloud Armor policy to prevent common attacks such as cross-site scripting (XSS) and SQL injection (SQLi) from reaching your web application's backend. What are two…

The correct answer is D. The backend service's load balancing scheme must be EXTERNAL. E. The load balancer must be an external HTTP(S) load balancer. These are the requirements for using Google Cloud Armor security policies: The load balancer must be an external HTTP(S) load balancer, TCP proxy load balancer, or SSL proxy load balancer. The backend service's load balancing scheme must be EXTERNAL. The backend service's…

Submitted by mike_84· Apr 18, 2026Configuring network security

Question

You plan to use a Google Cloud Armor policy to prevent common attacks such as cross-site scripting (XSS) and SQL injection (SQLi) from reaching your web application's backend. What are two requirements for using Google Cloud Armor security policies? (Choose two.)

Options

AThe load balancer must be an external SSL proxy load balancer.
BGoogle Cloud Armor Policy rules can only match on Layer 7 (L7) attributes.
CThe load balancer must use the Premium Network Service Tier.
DThe backend service's load balancing scheme must be EXTERNAL.
EThe load balancer must be an external HTTP(S) load balancer.

How the community answered

(28 responses)

A
7% (2)
B
11% (3)
C
4% (1)
D
79% (22)

Explanation

These are the requirements for using Google Cloud Armor security policies: The load balancer must be an external HTTP(S) load balancer, TCP proxy load balancer, or SSL proxy load balancer. The backend service's load balancing scheme must be EXTERNAL. The backend service's protocol must be one of HTTP, HTTPS, HTTP/2, TCP, or SSL. https://cloud.google.com/armor/docs/security-policy-overview

Topics

#Google Cloud Armor#Web Application Firewall (WAF)#External HTTP(S) Load Balancer#Network Security Policies

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice