Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 349

Question

Your company hosts a critical web application on Google Cloud. The application is experiencing an increasing number of sophisticated layer 7 attacks, including cross-site scripting (XSS) and SQL injection attempts. You need to protect the application from these attacks while minimizing the impact on legitimate traffic and ensuring high availability. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Configure a Cloud Armor security policy with customized and pre-configured WAF rules for OWASP Top 10 vulnerabilities at the load balancer. A load balancer distributes traffic across healthy backends in multiple zones for availability and scale. Cloud Armor protects applications from DDoS and common web attacks with WAF rules.

Google Cloud Professional Cloud Security Engineer PCSE — Question 349