PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #372
Your company hosts a critical web application on Google Cloud. The application is experiencing an increasing number of sophisticated layer 7 attacks, including cross-site scripting (XSS) and SQL…
The correct answer is D. Configure a Cloud Armor security policy with customized and pre-configured WAF rules for. The best solution is to configure a Cloud Armor security policy that includes both pre-configured and custom WAF rules for OWASP Top 10 vulnerabilities at the load balancer. This setup provides layer 7 protection against attacks like XSS and SQL injection, minimizes false…
Question
Options
- AImplement a load balancer in front of the web application instances, and enable Adaptive
- BConfigure Cloud Next Generation Firewall to block known malicious IP addresses targeting /32
- CEnable Google Cloud Armor's pre-configured WAF rules for OWASP Top 10 vulnerabilities at the
- DConfigure a Cloud Armor security policy with customized and pre-configured WAF rules for
How the community answered
(38 responses)- A8% (3)
- B16% (6)
- C5% (2)
- D71% (27)
Explanation
The best solution is to configure a Cloud Armor security policy that includes both pre-configured and custom WAF rules for OWASP Top 10 vulnerabilities at the load balancer. This setup provides layer 7 protection against attacks like XSS and SQL injection, minimizes false positives by allowing fine-tuned rule customization, and ensures high availability through integration with Google Cloud’s global load balancing.
Topics
Community Discussion
No community discussion yet for this question.