nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #345

Your organization manages a critical web application that serves international customers on Google Cloud. An increase in malicious traffic targeting this application has strained resources and…

The correct answer is C. Configure firewall rules to block traffic from known malicious IP ranges. Set up Google Cloud. Configuring firewall rules to block known malicious IP ranges combined with Google Cloud Armor provides robust perimeter defense and DDoS protection tailored to web applications. Adding Identity-Aware Proxy (IAP) enables granular access control, improving security by enforcing…

Submitted by jaden.t· Apr 18, 2026Configuring network security

Question

Your organization manages a critical web application that serves international customers on Google Cloud. An increase in malicious traffic targeting this application has strained resources and caused periods of downtime. You need to design security measures to increase the application's resilience against web attacks, enhance perimeter protection, and provide access control. What should you do?

Options

  • AEmploy network load balancing for traffic distribution. Update Identity-Aware Proxy (IAP) policies to
  • BSet up firewall rules on Compute Engine instances within the application's environment. Rely on
  • CConfigure firewall rules to block traffic from known malicious IP ranges. Set up Google Cloud
  • DAdd firewall rules that restrict all internal IP ranges. Establish Cloud DNS security policies. Disable

How the community answered

(55 responses)
  • A
    9% (5)
  • B
    2% (1)
  • C
    84% (46)
  • D
    5% (3)

Explanation

Configuring firewall rules to block known malicious IP ranges combined with Google Cloud Armor provides robust perimeter defense and DDoS protection tailored to web applications. Adding Identity-Aware Proxy (IAP) enables granular access control, improving security by enforcing user authentication and authorization. This integrated approach effectively increases resilience against attacks and controls access without compromising availability.

Topics

#Cloud Armor#Firewall Rules#Identity-Aware Proxy#Web Application Security

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice