Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 303

Question

There is a threat actor that is targeting organizations like yours. Attacks are always initiated from a known IP address range. You want to deny-list those IPs for your website, which is exposed to the internet through an Application Load Balancer. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create a Cloud Armor policy with a deny-rule for the known IP address range. Attach the policy to the backend of the Application Load Balancer. A load balancer distributes traffic across healthy backends in multiple zones for availability and scale. Cloud Armor protects applications from DDoS and common web attacks with WAF rules.

Google Cloud Professional Cloud Security Engineer PCSE — Question 303