Practice Test 1 | Google Cloud Certified Professional Cloud Architect | Dumps | Mock Test
A Digital Media company has recently moved its infrastructure from On-premise to Google Cloud. They have deployed several instances under a Global HTTPS load balancer. A few days ago an Application and Infrastructure were subjected to DDOS attacks. Hence they are looking for a service that would provide a defence mechanism against the DDOS attacks. Please select the relevant service from below.
A. Cloud Armor
B. Cloud-Identity Aware Proxy
C. GCP Firewalls
D. IAM policies
Correct Answer – A
Option A is CORRECT because Cloud Armor delivers defence at scale against infrastructure and application Distributed Denial of Service (DDoS) attacks using Google’s global infrastructure and security systems.
Option B is INCORRECT because, Cloud-Identity Aware Proxy lets you establish a central authorization layer for applications accessed by HTTPS, so you can use an application-level access control model instead of relying on network-level firewalls.
Option C is INCORRECT because GCP firewalls rules don’t apply for HTTP(S) Load Balancers, while Cloud Armor is delivered at the edge of Google’s network, helping to block attacks close to their source.
Option D is INCORRECT IAM policies don’t help in mitigating DDOS attacks.
Read more about Cloud Armor:
Comments are closed, but trackbacks and pingbacks are open.