Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
You are part of the security team of a global gaming firm. The company has built a new application to be deployed on GKE behind an HTTP(S) load balancer. The company wants the Load Balancer not to accept traffic from clients using out-of-date SSL features.
Which of the following Load Balancer policies will NOT meet the requirement?
A. The COMPATIBLE policy.
B. The MODERN policy.
C. The RESTRICTED policy.
D. The custom policy.
Correct Answer: A
- Option A is CORRECT. The COMPATIBLE policy supports clients that use out-of-date SSL features like TLS_RSA_WITH_AES_128_GCM_SHA256.
- Option B is incorrect. The MODERN policy does not support out-of-date features that use AES.
- Option C is incorrect. The RESTRICTED policy does not support out-of-date features that use AES.
- Option D is incorrect. The custom policy should be designed not to support out-of-date features that use AES.
Reference:
Comments are closed, but trackbacks and pingbacks are open.