Google Professional Cloud Network Engineer Question 491
Select 3Google Cloud PlatformYou are managing a web application deployed on Google Cloud using Cloud Load Balancing. The application is experiencing an increased number of automated bot attacks, causing performance degradation. You are tasked with configuring bot management using Cloud Armor to mitigate these attacks while minimizing false positives. Which steps should you take to effectively implement bot management?
- A
Enable the Cloud Armor Adaptive Protection feature to detect and mitigate bot attacks in real-time.
- B
Create a custom Cloud Armor rule to block traffic from IP ranges associated with known bot networks.
- C
Apply Google's preconfigured WAF rule set for bot mitigation to your Cloud Armor security policy.
- D
Block all incoming traffic from international regions where your application does not operate.
- E
Use Identity-Aware Proxy (IAP) to enforce user authentication for all requests.
Show answer and explanation
Correct answers: A, B, C
Explanation
Mitigating bot attacks requires a combination of targeted and preconfigured measures. Enabling Cloud Armor Adaptive Protection helps dynamically identify and mitigate bot traffic in real-time. Custom Cloud Armor rules targeting known malicious IP ranges provide an additional layer of defense. Using Google's preconfigured WAF rule set for bot mitigation ensures that industry best practices are applied. Blocking traffic from entire regions or enabling IAP are not optimal solutions for bot management and may lead to unintended consequences.
- A. Correct.
Enabling Cloud Armor Adaptive Protection allows Google Cloud to monitor and mitigate bot attacks dynamically, making it an effective tool for real-time protection.
- B. Correct.
Creating a custom rule to block known bot IP ranges is a targeted approach to prevent malicious traffic from these sources, reducing attack surface effectively.
- C. Correct.
Google's preconfigured WAF rule set for bot mitigation includes rules specifically designed to identify and block bot-related traffic, making it a suitable option in this scenario.
- D. Incorrect.
Blocking all traffic from international regions could lead to legitimate users being denied access to the application, and isn't a precise method for mitigating bot attacks.
- E. Incorrect.
While Identity-Aware Proxy (IAP) is useful for securing access to applications, it is not specifically designed for bot mitigation and may not address the root cause of the issue.