Google Professional Cloud Network Engineer Question 482
Select 3Google Cloud PlatformYou are a network engineer tasked with protecting a web application hosted in Google Cloud from potential Layer 7 DDoS attacks. You decide to configure Adaptive Protection in Cloud Armor. Which of the following steps are required to properly configure Adaptive Protection for your application?
- A
Enable Adaptive Protection in the security policy associated with the backend service.
- B
Set up a Cloud Armor rule to block all traffic from specific IP ranges.
- C
Train Adaptive Protection by allowing it to observe regular traffic patterns over time.
- D
Associate the Cloud Armor security policy with the backend service.
- E
Create a firewall rule to allow only traffic from trusted IP addresses.
Show answer and explanation
Correct answers: A, C, D
Explanation
To configure Adaptive Protection in Cloud Armor, you need to enable the feature within the security policy and associate the policy with the backend service. Additionally, you must allow Adaptive Protection to analyze regular traffic patterns to build a baseline for anomaly detection. Other actions, such as creating specific firewall rules or blocking IP ranges, are not directly relevant to configuring Adaptive Protection.
- A. Correct.
Correct: Enabling Adaptive Protection in the security policy is a required step to activate the feature and allow it to monitor and analyze traffic for potential threats.
- B. Incorrect.
Incorrect: While blocking specific IP ranges can be part of security configurations, it is not required for setting up Adaptive Protection specifically.
- C. Correct.
Correct: Training Adaptive Protection by allowing it to observe regular traffic patterns is necessary for it to build a baseline and detect anomalies effectively.
- D. Correct.
Correct: Associating the Cloud Armor security policy with the backend service ensures that the protection rules, including Adaptive Protection, are applied to the appropriate traffic.
- E. Incorrect.
Incorrect: Creating a firewall rule to allow only trusted IPs is a separate security measure and not directly related to configuring Adaptive Protection.