Google Professional Cloud Network Engineer Question 490
Select 4Google Cloud PlatformYour organization has deployed an application behind a Google Cloud HTTP(S) Load Balancer, and you are noticing unusual traffic patterns resembling bot activity. To mitigate this, you need to configure bot management using Google Cloud Armor. Which steps should you take to effectively configure bot management for this scenario?
- A
Create a Google Cloud Armor security policy and attach it to the backend service of the load balancer.
- B
Enable pre-configured WAF rules in the Google Cloud Armor policy to detect and block common bot patterns.
- C
Manually whitelist all IP addresses that you believe are legitimate to avoid blocking valid traffic.
- D
Configure rate-based rules in the Google Cloud Armor policy to limit requests from specific clients.
- E
Enable Google Cloud Armor Adaptive Protection to help detect anomalies in traffic patterns and mitigate attacks.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To effectively manage bot traffic using Google Cloud Armor, you need to attach a security policy to the backend service, enable pre-configured WAF rules to block common bots, and use rate-based rules to manage traffic volume from suspicious clients. Additionally, Adaptive Protection can help detect and mitigate complex bot patterns by analyzing traffic anomalies. Whitelisting IPs manually is not a recommended practice as it is prone to errors and not scalable.
- A. Correct.
Correct: Attaching a Google Cloud Armor security policy to the backend service ensures that traffic is inspected and policies are enforced.
- B. Correct.
Correct: Pre-configured WAF rules in Google Cloud Armor provide an effective way to detect and block known bad bots without manual intervention.
- C. Incorrect.
Incorrect: Whitelisting manually is not scalable and could lead to overlooking malicious traffic or accidentally blocking legitimate traffic if misconfigured.
- D. Correct.
Correct: Rate-based rules can be used to limit excessive requests from specific clients, a common behavior of bots.
- E. Correct.
Correct: Adaptive Protection in Google Cloud Armor analyzes traffic patterns and helps detect and mitigate anomalies, including bot attacks.