Google Professional Cloud Network Engineer Question 481
Select 3Google Cloud PlatformYou are tasked with configuring Adaptive Protection in Google Cloud Armor for a web application to defend against Layer 7 DDoS attacks. After enabling Adaptive Protection, which actions must you take to ensure it is properly set up and starts providing insights into potential threats?
- A
Associate the security policy with a backend service.
- B
Enable logging for the Google Cloud Armor policy.
- C
Manually define the attack patterns to be blocked by Adaptive Protection.
- D
Ensure the backend service has real user traffic for Adaptive Protection to analyze.
- E
Configure a custom rule to allow Adaptive Protection to block traffic automatically.
Show answer and explanation
Correct answers: A, B, D
Explanation
To properly configure Adaptive Protection, you must associate the security policy with a backend service, enable logging for the policy, and ensure real traffic is being analyzed to establish baselines. Adaptive Protection automatically identifies anomalies and recommends mitigations, so manual attack pattern definitions or custom rules are not required.
- A. Correct.
Correct: Adaptive Protection requires the security policy to be associated with a backend service to monitor and protect traffic directed to that service.
- B. Correct.
Correct: Logging must be enabled for the security policy to provide insights and analytics about potential threats.
- C. Incorrect.
Incorrect: Adaptive Protection automatically analyzes traffic patterns and identifies threats without requiring you to manually define attack patterns.
- D. Correct.
Correct: Adaptive Protection relies on analyzing real user traffic to establish baselines and detect anomalies effectively.
- E. Incorrect.
Incorrect: Adaptive Protection does not require custom rules for automatic blocking; it generates alerts and suggested rules instead.