Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 262

Question

Your organization hosts a sensitive web application in Google Cloud. To protect the web application, you've set up a virtual private cloud (VPC) with dedicated subnets for the application's frontend and backend components. You must implement security controls to restrict incoming traffic, protect against web-based attacks, and monitor internal traffic. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Configure Cloud Firewall to permit allow-listed traffic only, deploy Google Cloud Armor with predefined rules for blocking common web attacks, and deploy Cloud Intrusion Detection System (IDS) to detect internal traff... Cloud Armor protects applications from DDoS and common web attacks with WAF rules.

Google Cloud Professional Cloud Security Engineer PCSE — Question 262