There is a threat actor that is targeting organizations like yours. Attacks are always initiated from a known IP address range. You want to deny-list those IPs for your website, which is exposed to…

Question

Options

• ACreate a Cloud Armor policy with a deny-rule for the known IP address range. Attach the policy to
• BActivate Identity-Aware Proxy for the backend of the Application Load Balancer. Create a firewall
• CCreate a log sink with a filter containing the known IP address range. Trigger an alert that detects
• DCreate a Cloud Firewall policy with a deny-rule for the known IP address range. Associate the

• A
  71% (27)
• B
  5% (2)
• C
  18% (7)
• D
  5% (2)

Explanation

Cloud Armor: Cloud Armor is a web application firewall (WAF) that provides DDoS protection and advanced security features. Creating a deny-rule for the known IP address range will effectively block traffic from those IPs, preventing them from reaching your website. Application Load Balancer Integration: Attaching the Cloud Armor policy to the backend of the Application Load Balancer ensures that the policy is applied to all traffic entering your website, regardless of the specific backend instance.

No community discussion yet for this question.