Google Professional Cloud Network Engineer Question 484
Select 3Google Cloud PlatformYour team recently enabled Adaptive Protection in Cloud Armor to protect a web application hosted on Google Cloud. After deployment, you notice that some legitimate traffic is being blocked. What steps should you take to adjust the configuration and ensure legitimate traffic is allowed without compromising security?
- A
Review the Adaptive Protection recommendations in the Cloud Armor dashboard and create custom rules to exclude legitimate traffic patterns.
- B
Disable Adaptive Protection entirely to avoid blocking legitimate traffic.
- C
Use the preview mode in the Adaptive Protection rules to monitor traffic without enforcing any blocking.
- D
Refine the sensitivity level of the Adaptive Protection policy to better balance between security and false positives.
- E
Delete all existing Cloud Armor rules and rely solely on Adaptive Protection for security.
Show answer and explanation
Correct answers: A, C, D
Explanation
Adaptive Protection in Cloud Armor is designed to detect and mitigate Layer 7 (application layer) attacks. However, false positives can occur. To address this, you can review recommendations, use preview mode to monitor traffic without enforcing rules, and refine sensitivity levels. These steps help ensure legitimate traffic is not blocked while maintaining robust security.
- A. Correct.
Reviewing the recommendations in the Cloud Armor dashboard and creating custom rules allows you to fine-tune the protection to exclude legitimate traffic patterns without reducing security.
- B. Incorrect.
Disabling Adaptive Protection entirely removes the protection against potential attacks and is not a recommended approach to address false positives.
- C. Correct.
Using preview mode allows you to monitor how Adaptive Protection rules behave without blocking traffic, which is useful for testing and identifying adjustments needed.
- D. Correct.
Refining the sensitivity level of Adaptive Protection can help strike a balance between detecting threats and minimizing false positives, improving overall reliability.
- E. Incorrect.
Deleting all existing Cloud Armor rules removes any additional layers of protection and is not a good practice for securing your application.