Google Professional Cloud Network Engineer Question 376
Select 3Google Cloud PlatformYour company has implemented Google Cloud's Intrusion Prevention System (IPS) to enhance network security. You are tasked with configuring the IPS to ensure that only specific traffic patterns are monitored, while minimizing performance overhead. Which of the following steps should you take to correctly configure and optimize the IPS service?
- A
Select the appropriate preconfigured rules for your environment, such as those targeting web application vulnerabilities.
- B
Enable IPS on all subnets, regardless of whether they are hosting critical workloads or not.
- C
Use custom signatures to address specific threats unique to your organization.
- D
Configure logging for IPS to analyze detected threats and tune the system over time.
- E
Disable IPS in environments where you expect high traffic volumes to avoid performance issues.
Show answer and explanation
Correct answers: A, C, D
Explanation
To configure the intrusion prevention service (IPS) effectively, you should select preconfigured rules relevant to your environment, use custom signatures for unique threats, and enable logging for continuous monitoring and improvement. While enabling IPS on all subnets or disabling it in high-traffic environments may seem practical, these actions either unnecessarily increase overhead or reduce the system's effectiveness, respectively.
- A. Correct.
Selecting the appropriate preconfigured rules helps align the IPS configuration with the specific needs of your environment, ensuring effective monitoring for common threats.
- B. Incorrect.
Enabling IPS on all subnets is unnecessary and could result in increased performance overhead without adding significant security value for non-critical workloads.
- C. Correct.
Custom signatures allow you to extend IPS capabilities to detect threats that are unique to your organization, optimizing security coverage.
- D. Correct.
Configuring logging is essential to gain visibility into detected threats and helps in fine-tuning the IPS rules for better effectiveness over time.
- E. Incorrect.
Disabling IPS in high-traffic environments is not recommended. Instead, you should optimize the IPS configuration to balance security and performance.