Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
Your company has branches in several cities. The company wants to allow access to one of its web-facing applications from selected branches’ CIDR range. The application runs on a Compute Engine behind an HTTP(S) Load balancer.
How can you achieve this?
A. Create an allowlist with the CIDR ranges of the branches that do not need access in Cloud Armor and Configure Cloud Armor security policies with the allowlist.
B. Create a denylist with the CIDR ranges of the selected branches in Cloud Armor and Configure Cloud Armor security policies with the denylist.
C. Create an allowlist with the CIDR ranges of the selected branches in Cloud Armor and Configure Cloud Armor security policies with the allowlist.
D. Create a denylist with the CIDR ranges of the branches that do not need access in Cloud Armor and Configure Cloud Armor security policies with the denylist.
Answer: C
- Option A is incorrect. This option allows access from the branches that are not to be allowed.
- Option B is incorrect. This option denies access explicitly from the branches that should have access.
- Option C is CORRECT. This option allows the branches with the allowed CIDR to access the application.
- Option D is incorrect. The option will allow access from every CIDR block, not the denylist.
Reference:
Comments are closed, but trackbacks and pingbacks are open.