Google Cloud Professional Cloud Network Engineer PCNE — Topic 1 Question 188

Question

Your company uses Compute Engine instances that are exposed to the public internet. Each compute instance has a single network interface with a single public IP address. You need to block any connection attempt that originates from internet clients with IP addresses that belong to the BGP_ASN_TOBLOCK BGP ASN. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a new Cloud Armor network edge security policy, and use the --network-src-asns parameter. Cloud Armor protects applications from DDoS and common web attacks with WAF rules.

Google Cloud Professional Cloud Network Engineer PCNE — Question 188