Google Professional Cloud Network Engineer Question 480
Select 3Google Cloud PlatformYou are a network engineer responsible for securing a company's web application hosted on Google Cloud. The application has been experiencing an increasing number of Layer 7 DDoS attacks. To mitigate these attacks, you decide to configure Adaptive Protection for Cloud Armor. Which of the following actions are required to properly configure Adaptive Protection?
- A
Enable Cloud Armor Adaptive Protection in the security policy associated with the backend service.
- B
Define a rule to allow all incoming traffic before Adaptive Protection is enabled.
- C
Associate the Cloud Armor security policy with the backend service.
- D
Ensure the backend service is using a regional load balancer.
- E
Review and act on the alerts generated by Adaptive Protection for potential suspicious traffic.
Show answer and explanation
Correct answers: A, C, E
Explanation
To configure Adaptive Protection in Cloud Armor, you need to enable it within the security policy and associate the policy with the backend service. Once enabled, the feature observes traffic patterns and generates alerts for suspicious activity. Reviewing and responding to these alerts ensures that protections are optimized. Allowing all traffic is not required and could compromise security, and Adaptive Protection is compatible with both regional and global load balancers, so using a regional load balancer is not mandatory.
- A. Correct.
Correct: Adaptive Protection must be explicitly enabled within the Cloud Armor security policy to detect and mitigate potential DDoS attacks effectively.
- B. Incorrect.
Incorrect: Allowing all incoming traffic is neither required nor recommended. Cloud Armor rules should be defined to control access, but this is unrelated to enabling Adaptive Protection.
- C. Correct.
Correct: Cloud Armor security policies must be associated with the backend service in order for the Adaptive Protection feature to monitor and protect traffic.
- D. Incorrect.
Incorrect: Cloud Armor and Adaptive Protection work with both regional and global load balancers, so using a regional load balancer is not a requirement.
- E. Correct.
Correct: Adaptive Protection generates insights and alerts for suspicious traffic, and it is important to review and act on these alerts to fine-tune the policy and improve protection.