Google Professional Cloud Network Engineer Question 492
Select 2Google Cloud PlatformYou are a Google Cloud Network Engineer responsible for protecting your organization's web applications from automated bot attacks. The application is hosted behind a Google Cloud HTTP(S) Load Balancer. You need to implement a solution that allows legitimate traffic while blocking malicious bot traffic. Which steps should you take to configure bot management effectively?
- A
Enable reCAPTCHA Enterprise and configure a reCAPTCHA key in the load balancer settings.
- B
Create a custom Google Cloud Armor security policy and apply a preconfigured WAF rule for bot management.
- C
Configure rate limiting on the Google Cloud HTTP(S) Load Balancer to block high-frequency requests.
- D
Enable Cloud CDN for the load balancer to cache legitimate traffic and reduce bot impact.
- E
Integrate Google Cloud Armor with reCAPTCHA Enterprise to challenge suspicious traffic.
Show answer and explanation
Correct answers: B, E
Explanation
To configure bot management on Google Cloud, you should leverage Google Cloud Armor's preconfigured WAF rules designed for bot mitigation and integrate them with reCAPTCHA Enterprise to challenge suspicious traffic. These tools work together to effectively block malicious bots while allowing legitimate traffic to pass. Rate limiting and Cloud CDN are not specific solutions for bot management, and reCAPTCHA Enterprise requires integration with Google Cloud Armor rather than direct configuration in the load balancer.
- A. Incorrect.
reCAPTCHA Enterprise is not configured directly in the load balancer settings. Instead, it integrates with tools like Google Cloud Armor for bot management.
- B. Correct.
Google Cloud Armor provides preconfigured WAF rules, including those for bot management, which can detect and block malicious bot traffic.
- C. Incorrect.
Rate limiting is not specifically designed for bot management. It may help mitigate some high-frequency attacks but cannot differentiate between malicious bots and legitimate traffic effectively.
- D. Incorrect.
Cloud CDN is used to cache content and reduce latency but does not provide specific bot management capabilities.
- E. Correct.
reCAPTCHA Enterprise can be integrated with Google Cloud Armor to challenge traffic that is flagged as suspicious, enhancing bot management capabilities.