Practice Test 3 | Google Cloud Certified Professional Cloud Architect | Dumps | Mock Test
For this question, refer to the EHR Healthcare case study.
EHR Healthcare offers its services worldwide and believes it is important that they are always fast and available globally.
An element of concern is the possibility of receiving DDOS attacks. The fact of using Google Cloud provides a certain security but, during the period in which the services are migrated and therefore the applications also run on-premises, the concern of having a strong degradation of services with high costs is very great.
What are the best solutions for this requirement (Select TWO)?
A. Throttling on API
B. Global HTTPS Load Balancer
C. Cloud Armor and Security Command Center
D. A SIEM like Splunk
E. Use AWS Shield
F. Nginx
Correct answers: B and C
GCP copes with DDOS attacks at the Edge Network, that is before entering the private Google Network and its Data Centers.
The Global Load Balancing can mitigate and dissipate layer-3 and layer-4 volumetric attacks.
Cloud Armor is the product that deals not only with application (layer-7) DDOS attacks but also is a defense against SQL injection (SQLi), Cross-Site Scripting (XSS), and Remote Code Execution (RCE). It is active at the Edge, too.
- Option A is incorrect because throttling limits traffic to the application; it may help but is not a weapon against attacks.
- Option D is incorrect because SIEMs manage all the information useful to improve security
- Options E and F are incorrect because they are outside GCP: AWS Shield is an Amazon Service and Nginx is a network software that can be installed on a VM and can be used for similar scopes by smaller organizations
For any further detail:
Comments are closed, but trackbacks and pingbacks are open.