Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 341

Question

Your organization is deploying a new web application on Compute Engine and needs robust perimeter security. You need to protect the application from common web attacks, including SQL injection and cross-site scripting (XSS), while also controlling network traffic based on the source IP address and user identity. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Deploy Cloud Armor, and configure Cloud Firewall rules to control traffic based on source IP addresses. Integrate with Identity-Aware Proxy to control access based on user identity. Cloud Armor protects applications from DDoS and common web attacks with WAF rules. Identity-Aware Proxy enforces per-request access control to apps without a VPN.

Google Cloud Professional Cloud Security Engineer PCSE — Question 341