Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 325

Question

Your organization manages a critical web application that serves international customers on Google Cloud. An increase in malicious traffic targeting this application has strained resources and caused periods of downtime. You need to design security measures to increase the application's resilience against web attacks, enhance perimeter protection, and provide access control. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Configure firewall rules to block traffic from known malicious IP ranges. Set up Google Cloud Armor and implement Identity-Aware Proxy (IAP) for granular access control. Cloud Armor protects applications from DDoS and common web attacks with WAF rules. Identity-Aware Proxy enforces per-request access control to apps without a VPN. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Google Cloud Professional Cloud Security Engineer PCSE — Question 325